NetAnalysis v2 Blog

What’s New in HstEx® v4

HstEx® v4 is an advanced, Windows-based, multi-threaded, forensic data recovery solution which has been designed to recover deleted browser history and cache data from a variety of source forensic evidence files as well as physical and logical devices.

Specifically designed to work in conjunction with NetAnalysis® (and is provided as part of the suite), this powerful software can recover deleted data from a variety of Internet browsers, whether they have been installed on Windows, Linux or Apple Mac systems.

HstEx® supports a number of different source evidence types such as EnCase® e01 (Expert Witness) image files, EnCase® 7 ex01 files, AccessData® FTK™ image files or traditional monolithic and segmented dd image files.  It also supports direct sector access to physical and logical devices such as hard disks. HstEx® natively supports these sources for direct access and does not rely upon third party mounting software.

HstEx® is able to extract browser history and cache records directly from source forensic files enabling the recovery of evidence, not only from unallocated clusters, but also from cluster slack, memory dumps, paging files and system restore points amongst others.  It is an extremely powerful tool in your forensic tool-box.

HstEx® v4

The latest version of HstEx® is a completely new product which has been engineered from scratch. Utilising powerful parallel processing and Intelli-Carve® technology, HstEx® offers a considerable speed increase over our previous version, allowing the user to select multiple recovery types in a single session. Another important new feature for HstEx® v4 is the ability to create and queue recovery jobs for later processing.

To explore all the new features we have added to HstEx® v4, please see the following document:


Digital Detective HstEx v4

HstEx v4 Running a Recovery Job


Digital Detective HstEx v4 Recovery Job

Selecting Recovery Types for a Recovery Job

HstEx v4 Selecting Physical and Logical Devices


Selecting Physical / Logical Disks for Searching

0 replies

Leave a Reply

Want to join the discussion?
Feel free to contribute!

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>