+33 (0) 1 46 25 09 50
contact@tracip.fr

Paraben's P2 Examination Process is an alternative way of thinking in computer forensics. P2 works hand-in-hand with the Paraben forensic tool line. P2 Examination Technology includes all of our tools, each taking a different role in the examination. In the flow chart screenshot, you can see how each tool lessens the work-load by distributing the examination amongst different specialized tools. It goes along with the old adage of using the right tool for the job.

The process is simple. Complete a bit-stream image and then begin the 'divide and conquer' concept. Paraben's Forensic Sorter allows data that has been acquired to be sorted or categorized by header into different preassigned categories as seen on the chart. One of those categories is FOCH- Filter Out Common Hashes. This process can eliminate 20-30% of the drive data to known files, saving hours of time for the examiner. Once the sorting process is completed, any one of the numerous Paraben tools can be used to examine the newly categorized data because none of the sorting is proprietary and the data exists as raw files. Each of the tools then performs its function and the results come in a final output of data that can then be loaded into Paraben's Case Agent Companion for review by agents, attorneys, or clients.