Digital forensics / all software
Quick Capture
Drive imaging and triage
Image a drive as fast as it will go, and know it's failing before you start rather than halfway through. Quick Capture scans, images, hashes and compresses in one pass, then triages any E01 or raw image in seconds.
The problem it solves
Most imaging tools either start straight away and find out a drive is failing hours in, or need a separate check first, and many hash in a second pass. Once the image exists, the first questions are always the same: what's on it, whose was it and when was it last used. Quick Capture answers both without a full suite.
Who it's for: Digital forensic units and incident responders who acquire drives regularly and want fast first answers.
What it does
- Health check first. Quick, thorough or full-surface scans plus SMART data. If it finds a problem, imaging pauses for your decision.
- Fast acquisition. Reads, hashes (MD5, SHA-1, SHA-256) and compresses in one go, and tells you what limited the speed.
- E01 or DD. Compression, split sizes, verification and case details stored in the E01 header.
- Acquisition report. Hashes, timings and an acquisition log saved next to the image, in HTML or JSON.
- Triage in seconds. Open any E01 or raw image, from any tool, and see the OS, the device, its users, last logons and last saved files.
- No indexing needed. Triage reads the image's own metadata, so there's nothing to process first.
At a glance
- Platform
- Windows 10 and 11 (administrator rights to image)
- Formats
- E01, DD / raw, split sets
- Outputs
- HTML / JSON report, acquisition log
- Works offline
- Yes
- Pricing
- From £495, then £125 a year
Good to know
- Imaging physical drives needs administrator rights. Triage only reads image files, so it doesn't.
- SMART health data needs smartmontools installed; the sector scan works without it.
Quick Capture is in development
It isn't on general sale yet. Request early access to use it on your own material before release, report what works and what doesn't, and help shape the finished version. Early-access users get launch pricing locked in.
Planned launch prices, excluding VAT. A unit licence covers every workstation in one force's forensic unit.
- Try it before release on your own material
- Direct line to the developer for feedback
- Launch pricing locked in for early-access users