W4 lets investigators review digital evidence rapidly, locate items of interest quickly, and report their findings easily. W4 also gives investigators the ability to create AFF4 images, index live machines, and search data during indexing. This powerful tool enables triage in the field prior to taking data back to the lab for more detailed processing.
Key features of W4
W4 places a wide range of functionalities in the forensic examiner’s hands. It supports a broad range of forensic disk image and cellphone extraction formats and allows investigators to preview and search artifacts during indexing. First results are usually available in a matter of minutes after the indexing has started. W4's automatic extraction of notable registry artifacts can save the examiner many hours of manual artifacts extraction and data conversion to a human readable format.
W4’s unique Search Profiles
Initiate automatic RAM capture on live systems
Index and/or image live machines
Search a case during the indexing process
Detailed timeline of user activity with W4’s unique Events feature
Display item connections with W4’s unique Links feature
Prepare cases for more detailed review with Intella
W4 Who? What? When? Where?
W4 lets investigators review digital evidence rapidly, locate items of interest quickly, and report their findings easily.
W4 also gives investigators the ability to create AFF4 images, index live machines, and search data during indexing. This powerful tool enables triage in the field prior to taking data back to the lab for more detailed processing.
Powerful Reporting Capabilities
- Report by items, categories, tags, and custom fields
- Customize timelines with colorized tags and comments
- Report web history and images via configurable display types
- Hyperlinks to the exported files will be included in the report
- An unlimited number of link graphs can be included in the report
- Original format files can be exported along with the report
- Report settings can be reused via our customizable template mechanism
Meet the newest member of the Vound suite of digital forensic software products.
See firsthand how W4 can benefit you.
GeolocationLocate items with geodata on a zoomable world map.
Events viewUnified view of activities and other events in chronological order.
TimelineZoom in on a date range and see items and events within that date interval.
Additional W4 Features
TriageQuickly identify machines with pertinent case information while in the field using our portable app that can be run directly off a USB drive.
Live IndexingEnjoy the mobility live indexing offers you. Save time and money by examining your machines in the field instead of waiting for them to be packed up and sent to the lab for investigation.
Data AcquisitionUse W4 to pull disk images, user-defined files and folders, RAM information, and other data types from the machines you are examining.
RecipesCreate custom recipes that allow you to examine specific case types with the click of a single button.
Search and previewSystem settings, browser history, device usage, email, attachments, iTunes backups, archives, headers, documents, embedded images, and metadata.
Supported SourcesSupport for a wide range of forensic image formats: S01/E01/Ex01/L01/Lx01/AD1/ISO and DD. Support for Windows and MacOS file systems, GPT and MBR partitions, ISO and others. Support for Cellebrite, XRY and Oxygen Forensic Suite reports
Fully customizable reportingWizard for reporting relevant artifacts in the case ready for Court, or for your client.
Intella-compatibleW4 cases can be directly ingested and integrated into Intella to expand on analysis and reporting.
GeolocationAllows to quickly locate items with geodata on a zoomable world map. That includes pictures, emails, cellphone items and Google Maps URLs.
W4 is the Ideal Solution for
Investigative teams that need to triage live machines in the field
Law enforcement, government, and corporate entities needing a quick overview of pertinent data
Investigators and analysts who need a triage to courtroom solution