EnCase
(Guidance Software)

Guidance Software's EnCase® is the first-ever forensics platform and framework that allows organizations to immediately preview, analyze and acquire digital information connected to both local and wide-area networks.

EnCase® Forensic is Guidance Software's court-validated, stand-alone solution that provides corporate investigators and government authorities with powerful forensic, information auditing, analysis and IT management tools.

FTK
(Access Data)

Forensic Toolkit® (FTK®) is recognized around the world as the standard in computer forensic investigation technology. This court-validated platform delivers cutting edge analysis, decryption and password cracking all within an intuitive, customizable and user-friendly interface. In addition, with FTK, you have the option of utilizing a back-end database to handle large data sets. Or you can work without one if application simplicity is your goal. Either way you will get the benefit of best-of-breed technologies that can be expanded to meet your ever-changing needs. Known for its intuitive functionality, email analysis, customizable data views and stability, FTK is the smart choice for stand-alone forensic investigations

WinHex
X-Ways Forensics

X-Ways Forensics is an advanced work environment for computer forensic examiners and our flagship product. It runs under Windows 2000/XP/2003/Vista*/2008*. Compared to its competitors, X-Ways Forensics is more efficient to use after a while, often runs fast, is not as resource-hungry, finds deleted files and search hits that the competitors will miss, offer many features that the others lack, ..., and it comes at a fraction of the cost! It is based on the WinHex hex and disk editor and part of an efficient workflow model where computer forensic examiners share data and collaborate with investigators that use X-Ways Investigator. X-Ways Forensics comprises all the general and specialist features known from WinHex.

ProDiscover (Technology Pathways)

A completely integrated Windows™ application for the collection, analysis, management and reporting of computer disk evidence. Designed specifically to meet NIST (National Institute of Standards and Technology) standards. Saves space on forensics workstations by creating compressed image files. Keeps original evidence safe by creating an exact bit-stream copy. Finds data hidden in Windows NT/2000 Alternate Data Streams. Includes powerful search capabilities.

Mount Image Pro
Mountimage

Mount Image Pro is a computer forensics tool for Computer Forensics investigations. It enables the mounting of: EnCase .E01, .L01,AccessData FTK .E01, .AD1, Unix/Linux DD and RAW images, Forensic File Format .AFF ,SMARTISO (CD and DVD images) VMWare

Helix3
e-fense.

Helix3 Enterprise is an easy to use cyber security solution integrated into your network giving you visibility across your entire infrastructure revealing malicious activities such as Internet abuse, data sharing and harassment.  H3E also allows you to isolate and respond to incidents or threats quickly and without user detection through a central administration tool. 

Helix3 Enterprise allows you to quickly Detect, Identify, Analyze, Preserve and Report giving you the evidence to reveal the truth and protect your business.

Oxygen
Oxygen forensics

Using low-level protocols allows the program to extract: phone basic information and SIM-card data, contacts list, caller groups, speed dials, missed/outgoing/incoming calls, standard SMS/MMS/E-mail folders, custom SMS/MMS/E-mail folders, deleted SMS messages (with some restrictions) , SMS Center timestamps, calendar events schedule, tasks, text notes, photos, videos, sounds, LifeBlog data (all main phone events with their geographical coordinates), Java applications, file system from phone memory and flash card, GPRS and Wi-Fi activity, voice records and much more. The list of supported features depends on a certain phone model

Email - examiner
Paraben

Paraben's E-mail Examiner is one of the most comprehensive forensically sound e-mail examination tools available. E-mail Examiner recovers more active and deleted mail messages than the leading competitor. E-mail Examiner doesn't just recover e-mail in the deleted folders; it recovers e-mail deleted from deleted items (deleted/deleted). With bookmarking and advanced searching features including multiple word & multiple phrase searching, examining e-mail has never been so simple and thorough.

With the ability to examine AOL 9.0, PST files, and ability to examine over 14 other mail types, you'll have the right tool for e-mail examination in your toolbox.

KeyGhost
(KeyGhost)

The KeyGhost® is a hardware key logger that records up to 2 million keystrokes on a flash memory chip. It starts recording immediately and unobtrusively the moment the computer is turned on. Users can detect file theft and inappropriate use of the computer before it is too late to act. It can be attached externally to the keyboard cable, or hardwired inside the keyboard.