Law Enforcement Tools

NW3C offers, free of charge, a number of tools to assist our law enforcement partners in the prosecution of economic and high-tech crime.

PhotoHunter
Current Version: v1.0.2
PhotoHunter is a software product that is distributed free of charge to law enforcement that allows the user to view and plot images and their associated EXIF information.


Report Generator
Current Version: v2.0.1
Report Generator is a software product that is distributed free of charge to law enforcement that allows the user to generate an HTML-based report from separate data files.


PerpHound
Current Version: v4.0.1
PerpHound is a software product that is distributed free of charge to law enforcement that aids in the processing and plotting of Call Detail Records.


Coming Soon...NW3C Utility Suite
Current Version: v1.0.0
The NW3C Utility Suite is a collection of software products that are distributed free of charge to law enforcement. The included utilities and their descriptions are listed below.

USN Journal Converter : Current Version: v2.0.0
This utility allows the user to convert the output from either “Fsutil” or “USNDump” into a standard spreadsheet format for easier analysis
Recycle Bin Parser : Current Version: v1.0.0
This utility allows the user to quickly analyze the metadata and files found within the Windows Recycle Bin.
Quick Hashing Utility : Current Version: v1.0.0
This utility allows the user to quickly hash a file, a string, or hex values. The supported hash algorithms are: MD5, SHA1, SHA256, SHA384, SHA512, RIPEMD160, CRC32 (Hex), and CRC32 (Decimal)
Batch Hashing Utility : Current Version: v1.0.0
This utility allows the user to quickly hash the contents of a directory (selected directories can also be processed recursively). Once processed, the hashed values can be saved to a spreadsheet for later analysis. The supported hash algorithms are: MD5, SHA1, SHA256, SHA384, SHA512, RIPEMD160, CRC32 (Hex), and CRC32 (Decimal)
Hex Viewer : Current Version: v1.0.0
This utility is a basic hex viewer, which allows the user to view a file in a standard hexadecimal/ASCII format. The user can search for specific values, as well as copy/paste any hexadecimal or ASCII value(s).
Date/Time Utility : Current Version: v1.0.0
This utility allows the user to quickly convert between multiple date/time formats found during Computer and Mobile Forensics. Supported formats include: “Standard” date/time format, Unix, Mac Absolute Time, Windows File Time, HFS+ File Time, PRTime, Webkit, and more. In addition, the utility allows for conversion of custom date/time formats which allows the user to enter a custom epoch value.
SQLite Extraction Utility : Current Version: v1.0.0
This utility allows the user to export the data stored within a SQLite table to a spreadsheet.