As the adoption of Cloud technologies and solid-state storage increases, impacting the kinds of data that can be recovered from Windows® computers, the exploitation of hibernation files to "look back in time" and uncover compelling evidence becomes even more important. Hibernation Recon not only supports active memory reconstruction from Windows XP, Vista, 7, 8/8.1, and 10 hibernation files, but also extracts massive volumes of information from the multiple types (and levels) of slack space that often exist within them. Additional features of Hibernation Recon include the automatic recovery of valuable NTFS metadata and parallel processing of multiple hibernation files. Digital forensics experts can no longer afford to analyze electronic evidence without extracting maximum value from Windows hibernation files.
If Hibernation Recon is run without a license, it will run in "Free Mode" and provide core functionality. If Hibernation Recon is licensed, it will run in "Professional Mode” with full functionality enabled.