W4

W4 lets investigators review digital evidence rapidly, locate items of interest quickly, and report their findings easily. W4 also gives investigators the ability to create AFF4 images, index live machines, and search data during indexing. This powerful tool enables triage in the field prior to taking data back to the lab for more detailed processing.

Key Features of W4
  • Run pre-defined searches at the click of a button
  • Initiate automatic RAM capture
  • Index live machines
  • Search during indexing
  • Review a detailed timeline of events
  • Prepare cases for more detailed review with Intella
W4 - Who? What? When? Where?
W4 places a wide range of functionalities in the forensic examiner’s hands. It supports a broad range of forensic disk image and cellphone extraction formats and allows investigators to preview and search artifacts during indexing. First results are usually available in a matter of minutes after the indexing started. W4's automatic extraction of notable registry artifacts can save the examiner many hours of manual artifacts extraction and data conversion to a human readable format.

Using W4

Recipes

W4 uses a fully customizable, pre-determined search functionality to give examiners the ability to identify pertinent information to their case at the click of a button. W4 comes with out-of-the-box recipes designed to locate common crimes and examiners can create their own custom recipes to save them time on future cases.

Triage

W4 can be run as a portable app straight from a USB stick, allowing investigative teams to triage machines in the field. No dongle is required; a license is embedded in the software. With W4, experts can capture live data from machines that are powered on to prevent data loss and preserve that data for further investigation later on.

Links

Find direct and indirect links between artifacts such as USB devices, internet downloads, file access, emails, and documents with a few clicks.

Timeline

The Timeline allows users to visualize and annotate individual events in chronological order. Colorized tags simplify the workflow, making it easy to find the pertinent evidence and assemble it for reporting.

Powerful Reporting Capabilities

  • Report by items, categories, tags, and custom fields
  • Customize timelines with colorized tags and comments
  • Report web history and images via configurable display types
  • Hyperlinks to the exported files will be included in the report
  • An unlimited number of link graphs can be included in the report
  • Original format files can be exported along with the report
  • Report settings can be reused via our customizable template mechanism

Intella-compatible

W4 cases can be directly ingested and integrated into Intella to expand on analysis and reporting.

W4 Demo

Meet the newest member of the Vound suite of digital forensic software products.
See firsthand how W4 can benefit you.

Visualizations

Timeline

Zoom in on a date range and see items and events within that date interval.

Events view

Unified view of activities and other events in chronological order.

Links graph

See how items are linked, revealing accounts, ownership, devices, and actions.

Geolocation

Locate items with geodata on a zoomable world map.

Key Features

Fast, powerful, simple to use – these are key features that will help you conduct effective
investigations and be productive when searching in computer forensic images and evidence.

Forensic case triage

Triage

Quickly identify machines with pertinent case information while in the field using our portable app that can be run directly off a USB drive.
Index a live running system

Live Indexing

Enjoy the mobility live indexing offers you. Save time and money by examining your machines in the field instead of waiting for them to be packed up and sent to the lab for investigation.
Easy forensic data acquisition

Data Acquisition

Use W4 to pull disk images, user-defined files and folders, RAM information, and other data types from the machines you are examining.
Recipes allow to examine common cases fast

Recipes

Create custom recipes that allow you to examine specific case types with the click of a single button.
Extremely user-friendly interface

User-friendly interface

Allows the user to find and investigate the information relevant to the case.
Quickly search and preview

Search and preview

System settings, browser history, device usage, email, attachments, iTunes backups, archives, headers, documents, embedded images, and metadata.
Quickly search and preview

Blistering-fast indexing speeds

Allows access to the indexed data in the shortest time possible.
Search during indexing

Search during indexing

Allows to preview and search artifacts during indexing. First results are usually available in a matter of minutes after the indexing started.
Supports wide number of forensic image files

Forensic image formats

Supports wide number of forensic disk image formats: S01/E01/Ex01/L01/Lx01/AD1/ISO and DD. Support for Windows and MacOS file systems, GPT and MBR partitions, ISO and others.
Supports cellphone extraction formats from industry leading vendors

Cellphone extraction formats

Supports cellphone extraction formats from industry leading vendors: Cellebrite UFED, Micro Systemation XRY and Oxygen Forensic Suite
Fully customizable reporting

Fully customizable reporting

Wizard for reporting relevant artifacts in the case ready for Court, or for your client.
Automatic extraction of notable registry artifacts

Automatic extraction of notable registry artifacts

This can save the examiner many hours of manual artifacts extraction and data conversion to a human readable format.
Intella compatible

Intella-compatible

W4 cases can be directly ingested and integrated into Intella to expand on analysis and reporting.
Exceptional value

Exceptional value

Fully featured software at a fraction of the cost of similar products.
24/7 Support

Geolocation

Allows to quickly locate items with geodata on a zoomable world map. That includes pictures, emails, cellphone items and Google Maps URLs.
24/7 Support

24/7 Support

24/7 support via our support portal.
productive productivity esi software

If you would like a more hands-on look at how W4 could help you, download the following Quick Start Guides and see just how quick and easy it can be.

W4 is the Ideal Solution for

Discovering online user activity

Investigative teams that need to triage live machines in the field

Discovering online user activity

Law enforcement, government, and corporate entities needing a quick overview of pertinent data

Discovering online user activity

Investigators and analysts who need a triage to courtroom solution

Find out more

Discovering online user activity

Get a free copy

For a limited time you can get access to a fully functional copy of W4.

W4 Giveaway
Discovering online user activity

LIVE DEMO

The best way to see exactly how W4’s features will benefit your organisation.

REQUEST DEMO
Discovering online user activity

FACT SHEET

Have all the facts at hand with our PDF Fact Sheets.

DOWNLOAD FACT SHEET
cyber forensics