Belkasoft Evidence Center lives up to its tagline of “forensics made easier”. For a near complete automated case work, it works. An intuitive interface and automated processes make processing practically user-error free.
I took Belkasoft Evidence Center (BEC) for a test drive, ran it across several images, and validated what I saw with a different forensic suite. Everything that I tested, worked. Plus, it did a few things that my other tools do not.
At this point of digital forensics software development, especially with name brand companies such as Belkasoft, I am not going to get into the things that every forensic suite should be able to do, such as; adding images or imaging or data carving or creating bookmarks of items, unless there is something substantially different. If a tool cannot do the basics, then I don’t want to touch that tool or let it touch my evidence.
With that, this is my opinion of the Belkasoft Evidence Center, which is not an instruction manual, but rather the cool things that I like, and the differences from other tools that I see. Negatives? Of course, because no one tool will ever satisfy me as no single tool does everything exactly the way that I (as in, just me) like it.
Overall, I like it.
Top 4 positive bullet points of my test run:
1-Easy to set up
2-Processes data quickly
4-Gives a clear visual of the evidence
I’ll get into negatives later.
What’s different (or easier)
Top 4 things that caught my attention:
2-Live RAM processing and memory carving
3-VSC support (and snapshots are in the same place as the current drive state)