: Completed runtime images can be either resumed or rewritten if necessary.

: The forensic report now automatically includes creation and accessed time data for recovered files.

: It allows for simultaneous disk imaging and scanning, which significantly reduces total recovery time by writing the scan info alongside the image file.

© 2026 by Rüdiger Köppe Verlag