FeatureCommunityProfessional
SYSTEM hive support

SOFTWARE hive support

NTUSER.DAT hive support

Setupapi log file support

Amcache.hve file support

Event log support

Transaction Log support

Volume Shadow Copy support

Accepts multiple versions of all artifacts

Accepts individual files/folders as input

Accepts logical drive as input

Specify Case/Evidence Name

View all sources for each data point

Verbose device view

Change consistency level threshold

Advanced timezone settings

View other connection/disconnection times

View device deletion times

Results grid reporting module

Verbose view reporting module

Timeline reporting module

Preserve consistency levels in reports

Preserve sources in reports

Change displayed sources in results grid

Export device volume boot record

Export device master boot record

Full verbose view

Commercial/Business Use

————————————–USB Detective———————————————— Download Community  Purchase Professional