GetFree - Forensic Data Capture Tool

DoD Tested and Certified!

When files are 'deleted' in DOS, Windows, Windows 95 and Windows 98, the data associated with the file is not actually eliminated. It is simply reassigned to unallocated storage space where it may eventually be overwritten by the creation of new files over time. Such data can provide the computer forensics investigator with valuable leads and evidence. However, the same data can create a significant security risk when sensitive data has been erased using DOS, Windows, Windows 95 and Windows 98 file deletion procedures and commands.

GetFree software is used to capture all of the unallocated file space on DOS, Windows, Windows 95 and Windows 98-based computer systems. The program can be used to identify leads and evidence. It is also effectively used to validate the secure scrubbing of unallocated storage space with programs like NTI's M-Sweep ambient data deletion software.

When GetFree software is used as an investigative tool, it eliminates the need to restore potentially hundreds or thousands of files on computer hard disk drives and floppy diskettes. The software was primarily developed as a computer forensic tool for use in computer-related investigations and internal audits. However, GetFree has also proven to be an ideal tool for use in computer security risk assessments because the software automatically captures the data associated with unallocated file space. Such data can be reviewed and analyzed using other NTI forensic tools, e.g., Filter_G, NTA Stealth and Graphics Image File Extractor. The program and its uses are described in Computer Forensics, Incident Response Essentials by Warren G. Kruse II and Jay G. Heiser, Cyber Crime Investigator's Field Guide by Bruce Middleton and Cybersecurity Operations Handbook by Dr. John W. Rittinghouse and Dr. William M. Hancock.


GetFree Software - Primary Uses:



GetFree - Program Features and Benefits:

The current release is Version 1.7 and the GSA Product Number is GF1.7. U. S. Government clients should click here for information about GSA purchases.

Back To NTI's Home Page

Please direct E-Mail to



Copyright © 2004 by New Technologies Armor, Inc. January 18, 2004