Product Overview

SMA-FAX2 is a powerful and comprehensive forensic analysis software designed for extracting, analyzing, and visualizing electronic evidence. It integrates evidence retrieval, forensic analysis, relationship mapping, and automated report generation into a single platform.

With its advanced filtering capabilities, users can quickly locate key information anytime, anywhere. The built-in one-click extraction feature enables efficient data retrieval from Windows, Mac, and Linux systems, as well as from memory and files. Designed for ease of use, SMA-FAX2 requires minimal technical expertise, making it an ideal tool for digital forensic professionals.

Features

1. Multi-Format Support & Loading

Supports direct analysis of computer storage media and various disk image formats, including DD, IMG, 001, DMG, E01, and L01. Also compatible with virtual disk files such as VMDK, VHD, VDI, HDS, QCOW2, and VHDX, along with standalone directories and files.

2. Wide Compatibility & Partition Support

Supports local disks, optical drives, floppy drives, and external devices. Compatible with MBR and GPT partition schemes and file systems such as NTFS, FAT, exFAT, Ext2/Ext3/Ext4, HFS/HFS+, XFS, and APFS.

3. Automated Data Parsing

Provides five core modules: Windows, Mac, Linux, Memory File, and Live Forensics.

4. Browser Data Extraction

Supports analysis of over 10 popular browsers, including IE, Google Chrome, and Safari. Retrieves browsing history, cache, cookies, bookmarks, downloads, search records, and login email addresses.

5. Email Client Analysis

Supports comprehensive analysis of email clients, including Foxmail, Outlook Express (DBX), Office Outlook (PST, OST), Lotus Notes (NSF), and EML.

6. Application Analysis

Supports parsing of Windows ShimCache and Amcache data.

7. Compressed File Processing

Enables preview and analysis of compressed files in RAR, ZIP, and 7Z formats.

8. Office Metadata Analysis

Extracts key metadata such as document author, original creation time, last saved user, and internal modification timestamps.

9. Mobile Backup File Identification

Detects backup files from Apple and Android devices.

10. Time Decoding Tool

Includes a built-in tool for manually decoding numerical timestamp values.

11. Browsing History Analysis

Compiles browsing records based on website type and visit time. Allows manual categorization of websites.