How can I quickly identify and review all of the Internet-based graphics files contained on a specific computer hard disk drive relative to past Internet web browsing activities?
NTI’s Graphics File Extractor software can be used to quickly sample the Windows Swap/Page File and help the computer forensics investigator in making a quick determination about possible past Internet computer usage tied to a specific computer. Typically such a sampling can be completed in under one hour using Graphics File Extractor and the output will consist of reconstructed graphic image files. These output files can quickly be reviewed using a graphics file viewer like Firehand Ember. Although there are several graphics file viewing programs, we like Firehand Ember because it is easy to use and it is priced right to fit with limited law enforcement budgets.