MAESTRO WiSDOM
For the field! Live! Portable evidence collection / imaging tool!
MAESTRO WiSDOM Collector
For the field! Portable! Live forensics!
On-site Evidence Collection
[ Data Screening / Imaging ]
Evidence Data Analysis
[ Automated Analysis for Rapid Decisions ]
Memory Dump
[ Volatile & Non-volatile Data Collection ]
Portable Forensic Tool
[ Windows, macOS, Linux ]
Report Generation
[ Automated Report Creation ]
MAESTRO WiSDOM Collector
Specialized evidence acquisition tool
- Supports Windows, macOS, and Linux platforms
- Supports analysis of volatile data such as memory, network connections, and running processes
- Provides a lightweight environment that can be used immediately from portable media such as USB without booting
- Provides automated analysis and report generation for rapid on-site decision-making
On-site Digital Evidence Screening / Imaging
Live artifact selective collection
Rapidly select and collect key user activity records and forensic artifacts from a running Windows system
Disk imaging
Acquire physical disks and logical drives as forensic images
Filesystem viewer
Intuitively explore Windows filesystems and directory structures
Network agent & remote evidence collection
Deploy agents to networked Windows systems and collect evidence remotely
Easily select data with a simple click
Live collection from running systems without altering evidence
Mac Specialized Digital Evidence Collection / Imaging
Live evidence collection, dead-system evidence collection, and disk imaging
Supports Intel-based Macs and Macs with Intel T2 security chips
Supports Apple Silicon Macs
[ M1, M2, M3, M4, M5, continuously updated for the latest versions ]
Easily select data with a simple click
Collect data from running systems without altering evidence
[ Live System Evidence Collection ]
Supports Power Off imaging that clones the entire storage device while the computer is powered off
[ Dead System Evidence Collection ]
MAESTRO WiSDOM Collector for Mac is a Mac-specialized digital forensic tool that supports live evidence collection, inactive-system evidence collection, and disk imaging for macOS systems.
Linux Specialized Digital Evidence Collection / Imaging
Live artifact selective collection
Rapidly select and collect key system information and user activity artifacts from a running Linux system
Disk imaging
Acquire physical disks and logical drives as forensic images
Filesystem viewer
Intuitively explore Linux directories and filesystem structures
Network agent & remote evidence collection
Collect evidence remotely from networked Linux servers and workstations
Easily select data with a simple click
Live collection from running systems without altering evidence
MAESTRO WiSDOM Collector for Linux is a Linux-specialized digital forensic tool that rapidly selects and collects required data from on-site Linux servers and workstations, and performs disk imaging and remote evidence collection.
Rapid Analysis of Collected Evidence
In-depth analysis through MAESTRO WiSDOM macOS tools
Analysis of 350+ Mac forensic artifacts
Filesystem analysis, timeline analysis, correlation analysis, hash analysis, keyword analysis, encrypted file detection, OCR analysis, and more
Generate analysis results as reports immediately
MAESTRO WiSDOM Collector
You can check all the features of professional live forensic analysis through the video.
