The Most Advanced Mac Analysis and Reporting Available
See the evidence that is missed by other forensic tools …
Automated Analysis of macOS, iOS, Windows, Android, and Google Takeout
We are not just software engineers; we are Certified Forensic Computer Examiners. RECON LAB was designed by our active practitioners in the field who have decades of dedicated macOS forensic experience.
The analysis of thousands of artifacts and timestamps is dynamically configurable to speed up your investigations and reduce caseloads.
Mac Magic... Apple Extended Metadata
All Mac operating systems since 2005 have been creating an additional database of information about its files that can answer important questions and solve cases. Apple Extended Metadata can tell you a story about files; who sent it, when it was downloaded, how it was received, when it was viewed, was it opened by a human and more.
RECON LAB was the first to identify, parse and report on Apple Extended Metadata natively.
Reports for the 21st Century
RECON LAB introduces a new way of reporting with Story Board, a fully integrated report editor that puts you in control.
With Story Board, you can edit any part of your report directly inside RECON LAB. Tagged or bookmarked data can be arranged in true chronological order, in addition, screenshots and files can be attached to strengthen your findings. The integrated report editor includes all the standard text editing features you expect, built directly into the tool.
With automatic chronological sorting, you can tell the complete story, from beginning to end, exactly as it happened.Hex, SQLite, Plist, Text, Strings, Exif, Geodata... Viewers Galore!
No shortage of viewers in RECON LAB!
RECON LAB contains integrated viewers for every type of data. Additionally, advanced viewers such as our SQLite Viewer allow you to run SQLite queries inside RECON LAB for advanced analysis and reporting!
DEMO REQUEST
RECON LAB demos are active for 30 days.
*All fields required to process this request