DiskSearch Pro

Note: DiskSearch Pro has been replaced with NTI's TextSearch NT which has been enhanced for speed and it deals with all MicroSoft operating system searches. All DiskSearch Pro users can easily upgrade to this new forensic search utility.

One of the most popular computer forensics text search tools was written by William A. Haynes in the early 1990's. It was called DiskSearch Mark II and it became popular because of its ease of use and its ability to quickly find and document the existence of strings of text stored on computer storage devices. After its release, it was quickly adopted by and became the text search utility of choice by several law enforcement agencies, e.g., Internal Revenue Service, Criminal Investigation Division, the Federal Law Enforcement Training Center (FLETC), Revenue Canada, etc.

In July of 1998, NTI purchased the rights to DiskSearch Mark II and has made substantial improvements to aid computer forensics specialists and computer security specialists in the examination of todays large hard disk drives and data formats created by Windows 95, Windows 98, Windows NT and Windows 2000. upgraded the program to deal with FAT 32 systems and larger hard disk drives. DiskSearch Pro was developed to deal with all of these operating systems and its speed of operation has been increased substantially to aid our clients in classified government agencies in security reviews which involve the examination of large hard disk drives. As a result, this program is currently used by numerous U. S. government agencies around the world in security reviews. It is also used by numerous law enforcement agencies and Fortune 500 corporations.

DiskSearch Pro - Primary Uses:

• DiskSearch Pro is used to conduct security reviews and to identify data leakage associated with sensitive data.



• DiskSearch Pro is used in computer investigations on computer systems which rely upon any of the Microsoft operating systems.



• The program is used find strings of text in allocated files.



• It is used to find strings of text in file slack and unallocated space.



• DiskSearch Pro is also used to search computer storage devices at a physical level to identify data stored between allocated partitions. This complies with government security review requirements.



• DiskSearch Pro is very effective in identifying classified government data which may have leaked or migrated onto unclassified government computers.

DiskSearch Pro - Program Features and Benefits:

• DOS based for ease of operation, use and speed.



• Compact program size which easily fits on a single floppy diskette.



• Latest release includes the functionality of NTI's PTable software.



• Has a fuzzy logic option that can be used to find words with similar spelling or words that have been spelled incorrectly.



• Is not limited by the DOS 4 gigabyte boundary on drive size.



• False hits don't stop the processing.



• 250 key word search term capacity.



• FAT 12, FAT 16, FAT 32, Windows NT and Windows 2000 compatible.



• The user interface is friendly and easy to use.



• The program operates very quickly when compared with similar government programs like e.g., D-Scan. The current release operates much faster than prior releases and other similar programs. This helps when processing large hard disk drives.



• The program is effective in processing hard disk drives which contain multiple operating system partitions.



• The new Quick Search feature operates approximately 10 times faster and identifies the physical location of targeted strings of text.



• The latest release provides more information when targeted strings of text are found.



• Automatically deals with many embedded and encoded text formats.

The current release is Version 2.3 and the GSA Product Number is DSP2.3.

U. S. Government clients should click here for information about GSA purchases.