Belkasoft X Help

Introduction

• What is Belkasoft X and who are its users?
• Types of tasks Belkasoft X is used for
• Typical Belkasoft X workflow
• Forensically sound software
• When Belkasoft X uses the Internet
• Why Belkasoft X?

Quick start

• Installing Belkasoft X
• Belkasoft X Trial version limitations
• Activating Belkasoft X license
  • Electronic license activation
  • Floating (dongle) license activation
• Home screen
• Creating a report
• Dashboard
• Artifacts
• File System
• Timeline
• Connection Graph
• Incident investigation

Belkasoft X for public and private organizations

• X Forensic
• X Corporate

Belkasoft X user interface

• Belkasoft X user interface

Home screen

• Home screen
• Creating a case
• Other options and functions on Home

Dashboard

• Dashboard
• Case properties
• Actions
• Automatic searches
• Data sources
• Application types
• Artifacts

Adding data source

• Adding data source
• Look for matches from a hashset database

Artifacts

• Artifacts window

File System

• File System window

Timeline

• Timeline window

Connection Graph

• Connection Graph window
• Contacts and entities
• Graph pane
• Contact or connection properties pane

Hex Viewer

• Hex Viewer window

SQLite Viewer

• SQLite Viewer window

Plist Viewer

• Plist Viewer window

Registry Viewer

• Registry Viewer window

Settings

• Settings
• General settings
• Appearance settings
• Analysis profiles
• Bookmark settings
• Carving settings
• Picture settings
• Video settings

Bookmarks

• Creating a bookmark
• Bookmarks window
  • Bookmarks pane
  • Bookmarked artifacts list
  • Selected artifact properties

Tasks

• Tasks window
• Task statuses
• Entering missing data
• Filtering tasks

Search

• Searching artifacts
• Regular expression syntax
• Search Results window

Geolocation data

• Reviewing geolocation data
• Pictures with GPS
• Showing geolocation artifacts on Open Street Maps or Google Earth
• Exporting geolocation artifacts to KML format

Filters

• Filtering data
• Adding multiple criteria

Reports

• Creating reports
• Report options
• Including a map to a report
• Including a connection graph to a report

Acquisition

• Acquiring data source
  • Acquiring disk drive
  • Acquiring mobile device
    • Acquiring iOS device
    • Acquiring Android device
  • Acquiring cloud

Export to Evidence Reader

• Portable case with Belkasoft Evidence Reader