Summary of Main NetAnalysis® Features
NetAnalysis® is a state-of-the-art application for the extraction, analysis and presentation of forensic evidence relating to Internet browser and user activity on computer systems and mobile devices. It is a software product that offers significant improvements over existing applications and methodologies.
Browser Support
NetAnalysis® reigns supreme as the ultimate browser forensics tool, boasting unparalleled support for a vast array of browsers. No other forensic tool comes close to matching the depth and breadth of browser compatibility offered by NetAnalysis®.
With comprehensive coverage spanning mobile and desktop platforms, including Android, iOS, Windows, Linux, and macOS, forensic investigators can confidently examine web activity from virtually any device or operating system.
NetAnalysis® empowers investigators with the tools they need to uncover critical digital evidence, making it the go-to choice for browser analysis in the ever-evolving landscape of digital investigations. Trust NetAnalysis® for the most extensive browser support and stay ahead in the world of digital forensics.
Filtering and Searching
NetAnalysis® equips forensic examiners with a robust set of tools to meticulously sift through data and unearth critical evidence. Our Excel-style drop-down menus simplify the process of selecting filters, streamlining your workflow. You can save your customized filters for future use or choose from a range of predefined filters in the filter manager.
For those seeking unparalleled control, the powerful filter editor enables the creation of complex queries, allowing you to fine-tune your data analysis to unprecedented depths.
But that’s not all—NetAnalysis®’s search capabilities are equally powerful. You can search from the column headers or utilize complex search syntax in the find panel, enabling swift and precise evidence discovery. With NetAnalysis®, filtering and searching have never been more intuitive or effective, making it your go-to choice for data analysis in forensic investigations.
Indexing and Searching
NetAnalysis® is equipped with a formidable tool—our high-performance, full-featured text search engine—designed to turbocharge your evidence identification process. When processing browser cache, we textify HTML page content and load it into our indexing engine for comprehensive analysis. We also include other text content that might contain valuable evidence.
This innovative approach empowers users to harness the full potential of powerful search syntax, enabling lightning-fast data searches and the rapid identification of pertinent information. Once you’ve pinpointed the text you need, NetAnalysis® effortlessly matches it back to the original file, allowing you to trace its origins with ease. With NetAnalysis®’s indexing and searching capabilities, you gain a vital edge in efficiently uncovering evidence during forensic investigations.
URL Analysis
NetAnalysis® features an exceptionally robust examination and analysis window that equips forensic examiners with a powerful toolkit. This comprehensive suite empowers users to convert and dissect a wide range of data, including timestamps in various formats (Unix, Windows, OLE, etc.), object conversion (such as Google EI parameters and Guids), string manipulation (URL unescape, RFC 1738, RFC 2396, RFC 3986, HTML Entities, ASCII85, ROT13, ROT18, and ROT47), and binary conversion (Base16, Base32, Base32Hex, Base58, Base64, Base64URL, Data URLs, and UU Encoding).
These capabilities further expand your potential to scrutinize and interpret digital evidence with precision. With NetAnalysis®, you gain an invaluable asset for navigating the complexities of digital investigations, ensuring you have the tools needed to uncover hidden insights within URLs and related data.
Information and Warnings
Within NetAnalysis®, two essential panels—Information and Warnings—stand ready to provide crucial insights regarding record entries.
The Information panel serves as a repository for additional critical details that may not neatly fit into specific columns. It offers invaluable interpretations and supplementary information, enhancing your understanding of the data.
Meanwhile, the Warnings panel is a vital resource for forensic analysts, flagging essential information that demands attention. This includes identifying records stemming from private or incognito sessions, ensuring that you remain aware of their unique context. Additionally, recovery warnings are issued for data retrieved by HstEx®, particularly when it may be partially intact. These warnings arm you with the knowledge necessary to navigate forensic investigations with precision and diligence.
Cookie Examiner
The Cookie Examiner in NetAnalysis® has undergone substantial enhancements, providing forensic examiners with even more valuable insights into cookie entries. We include robust support for Google Analytics cookies, where component parameters are meticulously extracted and displayed for analysis.
Additionally, the Cookie Examiner seamlessly integrates with the text analysis window, offering users a comprehensive toolkit for in-depth examination. This synergy empowers forensic investigators to dissect and interpret cookie data with greater precision, making NetAnalysis® the go-to solution for unravelling the complexities of cookies in digital investigations.
Properties Examiner
NetAnalysis® introduces the Properties Examiner—a dynamic dockable window that offers deep insights into the various properties and settings associated with a specific browser.
When users select a Preferences entry type and activate the viewer, they are presented with a comprehensive list of property name/value pairs. This information is enriched with category details and a Date column, displaying timestamps for values that can be converted to date/time format.
What sets the Properties Examiner apart is its robust feature set, including built-in filtering and searching capabilities. Users can seamlessly filter and search through property data, streamlining the investigative process. Furthermore, an option to identify properties of interest enhances your ability to focus on key information.
Just like our main Filtering feature, the Properties Examiner allows you to save and load filters, ensuring that you can effortlessly revisit and apply customized settings for your forensic investigations. With the Properties Examiner, you gain an indispensable tool for delving into the intricacies of browser properties and settings.
Web Page Offline Viewing
NetAnalysis® has undergone a significant enhancement in its approach to offline web page viewing. In previous versions, we rebuilt cached web pages using locally extracted data, but this method didn’t consistently produce optimal results for modern web pages.
Now, NetAnalysis® utilises a built-in Chromium-based browser that leverages the full power of the browser itself. When viewing cached web pages, this browser dynamically requests the cached elements, and our cache engines extract data directly from the corresponding cache. This modern approach not only improves the accuracy of offline page rendering but also enhances NetAnalysis®’s capability to handle both client and server-side redirects. The result is a more effective and efficient tool for displaying cached web pages during forensic investigations.
Built-In Viewer
NetAnalysis® boasts a powerful offline viewer, leveraging the capabilities of Google Chrome, to display web pages extracted from the cached data of corresponding browsers. Beyond rendering web pages, this versatile viewer extends its functionality to showcase web page previews, thumbnails, cached images, favicon images, top site thumbnails, and a wide array of other image types stored by browsers.
Users enjoy the convenience of exporting displayed content to popular formats such as PDF, PNG, and MHTML, enhancing their ability to document and analyse digital evidence. Additionally, the viewer offers a “View Source” mode equipped with syntax colouring and formatting support for various common formats, enabling meticulous examination of web page content.
With the NetAnalysis® built-in viewer, you gain a comprehensive toolset for rendering, analysing, and exporting web content, making it an indispensable asset for forensic investigations.
Exporting
NetAnalysis® offers an array of robust options for efficiently exporting data, whether it’s all records or a specific subset, from the workspace.
Users can seamlessly export data to a new NetAnalysis® workspace, facilitating the organization and management of forensic findings. Additionally, NetAnalysis® supports exporting to commonly used formats like Comma Separated Values (CSV), Tab Separated Values (TSV), SQLite Database, and TLN Timeline, streamlining data sharing and collaboration with other forensic tools and platforms.
For added flexibility, NetAnalysis® provides the ability to export data in various formats, and users can choose to have data written to a report. These versatile export options empower forensic investigators to tailor their data output to meet specific investigative needs, making NetAnalysis® a comprehensive solution for data extraction and reporting in digital investigations
Reporting
NetAnalysis® includes a robust embedded reporting platform with a feature-rich Report Designer, empowering forensic investigators to create and customize reports with ease. The platform offers a wide range of controls such as charts, cross-tabs, gauges, and barcodes for visualizing data effectively.
Key features of NetAnalysis® Reporting:
- Data Shaping: Calculate summaries, group and sort data, filter, and format data to tailor your reports precisely to your investigative needs.
- End-User Report Designer: A fully customizable report designer allows you to create reports that match the specific requirements of your investigation.
- Rich Data Visualization: Reports support various elements, including tables, charts, maps, gauges, and more, enabling the creation of visually appealing and informative reports.
- Interactive Features: Reports offer drill-down, filtering, and sorting features, allowing users to explore data in-depth and quickly locate the information they need.
- Customizable Design: Reports are highly customizable, enabling you to fine-tune the layout, appearance, and behaviour to make them intuitive and informative.
- Export Options: Reports can be exported to multiple formats, including PDF, DOCX, RTF, XLS, XLSX, TXT, MHT, CSV, HTML, and various image formats. This versatility simplifies sharing and archiving reports for future reference.
NetAnalysis®’s comprehensive reporting capabilities empower you to present investigative findings effectively, enhancing your ability to communicate and analyse critical digital evidence.