Belkasoft Remote Acquisition (Belkasoft R) is a new digital forensic and incident response tool developed specifically for forensically sound remote extractions of hard and removable drives, RAM, connected mobile devices, and even specific types of data.

Belkasoft R will be useful in cases when an incident response analyst or a digital forensic investigator needs to gather evidence quickly and the devices in question are situated in geographically distributed locations.

Why Use Belkasoft Remote Acquisition?

• With Belkasoft R, there is no longer a need to interrupt an employees' daily routine or draw excessive attention to your investigation

• No more geographical challenges and expensive trips

• No need in having trained specialists in all locations of your organization’s offices

• Belkasoft R saves you time and money while performing forensically sound remote acquisitions: no more excessive costs and time needed for travel

Key Benefits:

• Ease of agent deployment

• Support for Windows and macOS operating systems

• Straightforward acquisition

• Mobile device support

• Support for various network configurations

• Quick partial acquisition

• Network bandwidth management with flexible image upload scheduling

• Management of a large network consisting of various devices under your control

Supported Acquisition Types:

• Remote hard or removable disk drive

• Selected artifacts from an endpoint

• Remote mobile device connected to an endpoint

• Endpoint’s RAM memory (Windows only)

Deploy Agents:

• Deploy agents with GPO (Group Policy Objects), if you are an administrator of a Windows domain

• Use WMI (Windows Management Instrumentation)

• Simply run an agent from a USB thumb drive or even a network share

• Deploy agents onto Windows and macOS devices

Schedule&Acquire:

• Specify which endpoints to acquire. Simultaneous acquisition of multiple endpoints is supported

• Choose whether to compress and hash data

• Schedule when to start an acquisition and when to upload acquired data to a central location

• Your data is secured with an SSL encryption

Analyze:

• Images created by Belkasoft R are compatible with Belkasoft X. Analyze them with Belkasoft's flagship DFIR tool!

• Investigate hacking and intrusions into Windows-based computers with the help of our Incident Investigations module

• Get the most out of Belkasoft X with its powerful analytical features like Timeline, Connection Graph and Cross-Case Search