Forensic Data Filter

Please note that some of the patented functionality of this program has been incorporated in separate tools, i.e., FNames, and Filter_G. The funtionality that remains in Filter_I is described as follows:

Filter_I is used to filter the contents of files and it can either be set to eliminate or replace non-ASCII characters. The can be used very effectively to create a printable file from partial or damaged word processing files and temporary files created by word processing files. It can also assist in the identification of passwords entered by the computer user during Windows work sessions when it is used to filter Windows swap files and Windows page files. However, this capability should not be confused with our powerful Suite of Password Recovery tools.

Filter_I and the functionality moved to FNames and Filter_G is mentioned and described in the books Computer Forensics, Computer Crime Scene Investigations by John R. Vacca, Cyber Crime Investigator's Field Guide by Bruce Middleton, and Cybersecurity Operations Handbook by Dr. John W. Rittinghouse and Dr. William M. Hancock.

FILTER_I - Primary Uses:

  • Used to filter binary characters from partial or reconstructed word processing files.

  • Used to exclude binary characters from ambient data sources.

  • Aids in the identification of passwords and network logons stored in ambient data sources.

FILTER_I - Program Features and Benefits:

  • DOS based for speed. The speed of operation is amazing.

  • No Software Dongle! - We know that software dongles get in the way and they restrict your ability to process several computers at the same time. That is why NTI does not use software dongles and our licensing of this software allows you to process multiple computers at the same time. NTI's goal is to make your life easier and this software was designed with ease of use in mind.

  • Automatically processes any data object, e.g., a swap file, a file constructed from combined file slack, a file constructed from combined unallocated space, a Windows swap/page file.

  • Provides output in an ASCII text format that is ready for import into any word processing application.

  • Capable of processing ambient data files that are up to 2 gigabytes in size.

  • Free Upgrades for one year from the date of purchase.

  • Quantity discounts and site licenses are available.

The current release is Version 4.7 and the GSA Product Number is FI4.7.
U. S. Government clients should click here for information about GSA purchases.