Elcomsoft Mobile Forensic Bundle vs SIFT Workstation
Elcomsoft Mobile Forensic Bundle
us.elcomsoft.comSIFT Workstation
sans.orgSide by side
| Figure | Elcomsoft Mobile Forensic Bundle | SIFT Workstation |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | — |
| Windows | Yes | Yes |
| macOS | Yes | — |
| Linux | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 1 | 1 |
| Spec score · Computer Forensics Software | 7.9 (#5) | 7.5 (#8) |
| Spec score · Digital Forensics Software | 7.9 (#11) | 7.5 (#19) |
| Founded | 1990 | 2007 |
| Included tools | The common license lists one copy each of Cloud eXplorer, Dictionaries, Phone Breaker Forensic Edition, Phone Viewer Forensic Edition, and iOS Forensic Toolkit. | The software includes Plaso, Rekall, Volatility, ClamAV, SleuthKit, and hundreds of additional tools. |
| Purpose | The bundle provides tools to acquire and analyze evidence from smartphones and tablets using physical, logical, and over-the-air methods. | SIFT Workstation is a collection of free and open-source incident response and forensic tools for detailed digital forensic examinations. |
Plans
Elcomsoft Mobile Forensic Bundle
- Common license$3,999, paid once
In their own words
Elcomsoft Mobile Forensic Bundle
Elcomsoft Mobile Forensic Bundle has no write-up on Specifiction yet; its figures are above.
SIFT Workstation
SIFT Workstation is a free, open-source collection for incident response and detailed digital forensic examinations. It supports analysis of file systems, network evidence, memory images, threat intelligence and indicators of compromise. Included software includes Plaso, Rekall, Volatility, ClamAV, SleuthKit and hundreds of additional tools. Evidence image formats listed are raw, AFF, EWF, split raw, split EWF, VMDK, VHD/VHDX and QCOW. Supported file systems include NTFS, HFS+, FAT12/16/32, ext2/3/4, UFS1/2, ISO9660, swap, raw data and memory data. SIFT runs on Linux and Windows and can be self-hosted. Users can download an OVA virtual machine appliance listed at 8.81 GB, install natively on Ubuntu 22.04 with the Cast installer, or use Ubuntu 22.04 through Windows Subsystem for Linux with WSL 1 or WSL 2. REMnux components can be added. SANS directs download issues to [email protected] and bugs or feature requests to the GitHub project.