Virtual Forensic Computing (VFC)

VFC removes the guesswork from virtualisation and allows the investigator to concentrate on the investigation. It lets the investigator to quickly experience the computer environment just like the original user. This puts the investigator “in the room” with the suspect, providing invaluable access to software and data that cannot be easily found with a typical “dead box” examination.

Launched in 2007, VFC is the leading virtualisation solution for the forensic investigator. VFC is used to create a virtual copy (VM) of a suspect computer:

• Fast – VFC typically takes just a couple of minutes to produce a bootable VM
• Safe – VFC is forensically safe and doesn’t modify original evidential data
• Flexible – VFC supports common forensic image formats and write-blocked physical disks
• Reliable - Based on over 15 years of research, contains support for numerous operating system and machine configurations and can produce a usable VM in > 95% of cases
• Capable – VFC includes a built-in image mount tool and can bypass most Windows account passwords in seconds