Elcomsoft Mobile Forensic Bundle vs Timesketch
Elcomsoft Mobile Forensic Bundle
us.elcomsoft.comTimesketch
timesketch.orgSide by side
| Figure | Elcomsoft Mobile Forensic Bundle | Timesketch |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | — | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | Yes |
| API | — | Yes |
| Self-hosted | — | Yes |
| Plans published | 1 | 1 |
| Spec score · Digital Forensics Software | 7.9 (#11) | 7.6 (#17) |
| Purpose | The bundle provides tools to acquire and analyze evidence from smartphones and tablets using physical, logical, and over-the-air methods. | Timesketch is an open-source tool for collaborative forensic timeline analysis. |
Plans
Elcomsoft Mobile Forensic Bundle
- Common license$3,999, paid once
In their own words
Elcomsoft Mobile Forensic Bundle
Elcomsoft Mobile Forensic Bundle has no write-up on Specifiction yet; its figures are above.
Timesketch
Timesketch is a free, open-source tool for collaborative forensic timeline analysis. A sketch normally represents one case and can contain multiple timelines, views, comments and stories. Investigators can search and filter timelines, inspect data in charts and save discoveries as views. Sketches may be private or shared with individuals, groups or all system users. Supported imports include Plaso storage files, CSV, JSON, JSONL, Pandas DataFrames, Python dictionaries and spreadsheet files. Python analyzers run in background workers to enrich events, add tags or create saved views; documented integrations include Sigma, Google Safe Browsing, BigQuery, Yeti and HashR. Sigma support is marked alpha with known performance and functionality issues. Timesketch offers a web interface, REST API and command-line client. Docker is the only tested and actively maintained installation method; documentation calls for Ubuntu 22.04 and at least 8 GB of RAM. Indexes depend on physical disk space, and searches may fail above 150 indices in a timeline. The self-hosted plan is free.