Forensic Imaging & Triage
NBFTools NETRE
Triage and acquisition for Mac, Windows and Linux, including Apple Silicon and T2 decrypted images.
- Windows
- Linux
- macOS
-
Computer Forensics
NBFTools supports imaging, processing and analysis of data from Microsoft Windows, Apple Mac and Linux operating systems, including servers. Other file systems are supported too.
-
Mobile Forensics
Unlock the power of mobile device forensics with NBFTools. Analyse data from iPhones, iPads and Android devices, and integrate mobile backups from other forensic tools.
-
Cloud
NBFTools is the most intuitive digital forensic software for analysing data from cloud services, including email, chats, web history, photos and more.
15+
Years of
Experience
About Company
NBFTools
- Digital Forensic Products
- Digital Forensic Services
- Digital Forensic Training
- Community Collaboration and Outreach
NBFTools Private Limited is a leading digital forensics research and development company based in India. It builds state-of-the-art forensic tools with cutting-edge technology to meet the industry's evolving needs. Experienced digital forensics experts lead the team, and with more than 15 years of hands-on experience they excel in Linux, Windows, Macintosh, Android, iOS and cloud forensics.
As an authorized NBFTools reseller, Noah Forensics Solutions brings these innovative solutions to your digital forensic requirements.
Read More (opens nbftools.com in a new tab)Why Choose Us
Why Invest in NBFTools?
NBF is built on the rock-solid foundation of the Linux platform, with fully customisable features. User privacy comes first: the tools collect no user data.
-
Corporate
We help corporations with internal investigations and support digital forensic service providers on complex cases.
-
Individuals
We are always ready to listen to anyone who needs help with complex investigation techniques, legal strategy or the cyber world.
-
Government
With a comprehensive range of forensic tools and the expertise to use them, we help government agencies solve criminal cases.
-
Education
We partner with universities and colleges on industry-aligned digital forensics courses. NBFTools are available to academia at a minimal price.
Our Products
Complete forensic suites, from imaging to reporting
Noah Forensics Solutions is an authorized reseller of NBFTools. We supply licenses and hardware, and we support you through deployment, training and casework.
Multi-OS Forensic Analysis
NBFTools TRIOS
Analyse forensic images from macOS, Windows, Linux, mobile backups and the cloud, running natively on all three OSes.
- Windows
- Linux
- macOS
iOS Acquisition & Analysis
NBFTools NITRO
iOS triage, acquisition and detailed analysis with a fast core engine and minimal hardware requirements.
- Windows
- Linux
- macOS
Forensic Workstations
RCKTBX X6i Workstation
A purpose-built processing engine by BitMindz with an i9-13900KF, 128GB DDR5 and a built-in write-protect bay.
- Windows
- Linux: not available
- macOS: not available
Flexible Licensing
Monthly Mac Licenses
Monthly TRIOS and NETRE licenses for Mac, valid for 30 days from activation.
- Windows: not available
- Linux: not available
- macOS
Forensic Imaging & Triage
NBFTools NETRE
NETRE is a digital forensics triage and acquisition tool for Mac, Windows and Linux. It images to E01, DD and virtual hard disk formats in live and custom-booted environments on Intel, AMD and Apple Silicon machines. It also supports targeted collection by user profile, application or custom filter.
- Windows
- Linux
- macOS
Monthly Mac license available. Request a license
Apple Mac Acquisition
- Acquire live-running Apple Silicon and Intel Macs
- Boot Apple Silicon and Intel Macs for acquisition
- Support for M1, M2 and M3-based Apple machines
- Acquire data from FileVault-encrypted Macs
Linux & Windows Acquisition
- Boot Intel and AMD 64-bit desktops, servers and laptops
- Acquire data from live-running Windows machines
- Triage live-running Mac and Windows machines
- Triage Mac, Windows and Linux in forensically booted environments
Powerful Features
- Acquire volatile data from live-running Macs
- Selective acquisition by user profile, file or folder
- Acquire iOS devices on Mac, Windows and Linux
- Preserve hashes and POSIX / Apple timestamps
Imaging Formats
- E01 (EWF) forensic images
- Raw DD images
- Virtual hard disk output
- Six acquisition applications in one suite
Multi-OS Forensic Analysis
NBFTools TRIOS
TRIOS is a digital forensics analysis tool that runs on Apple Mac, Microsoft Windows and Linux. It analyses forensic images from Windows, Linux, macOS, servers and USB drives, plus iOS, Android and cloud backups and logically acquired data. Its core engine delivers results quickly on modest hardware.
- Windows
- Linux
- macOS
Monthly Mac license available. Request a license
Extensive Data Support
- macOS, Windows, Linux, mobile and cloud data
- APFS, HFS+, NTFS, exFAT, FAT, Ext2/3/4, Btrfs and more
- BitLocker, FileVault and Linux-encrypted images
- DD, EWF (E01), AFF4 and Apple Disk Images
Automatic Artifact Analysis
- Browser history, downloads, logins and cookies
- Windows Registry examination
- Apple Metadata, KnowledgeC DB and Apple logs
- Email and message analysis
In-Depth Image Analysis
- Signature check and EXIF metadata
- Skin-tone detection
- Face detection and face matching
- Illicit content detection and OCR
Timeline & Reporting
- Timelines from hundreds of artifact timestamps
- File system and Apple metadata timestamps
- Reports in HTML, PDF, XML, CSV and KML
- Encrypted reports and built-in report writer
Screenshots
iOS Acquisition & Analysis
NBFTools NITRO
NITRO is an iOS acquisition and analysis tool for fast, efficient mobile forensics. It handles triage, acquisition and in-depth analysis in one workflow, keeping hardware requirements low while delivering fast, accurate results.
- Windows
- Linux
- macOS
iOS Acquisition
- Capture app activity, system logs and user interactions
- Encrypted acquisition and transfer of sensitive data
- Extract Apple Mail, KnowledgeC DB and Apple Apps data
Automatic Artifact Analysis
- Browser history, downloads, logins and cookies
- Installed application data
- Emails and messages analysis
Timeline Analysis
- Timelines built from multiple artifact timestamps
- Reconstruct critical events and their sequence
- Visual timeline graphs
Forensic Reports
- Hundreds of report types
- HTML, PDF, XML, CSV and KML output
- Encrypted reports and built-in report writer
Built by BitMindz
Forensic Workstations
RCKTBX X6i Processing Engine
- Windows
- Linux: not available
- macOS: not available
A top-rated forensic workstation for rapid triage and processing of computer data and forensic images. It pairs a 13th-generation Intel Core i9 with fast PCIe 4.0 NVMe storage and 128GB of DDR5 RAM. Built by NBFTools partner BitMindz, whose team has decades of hands-on forensic experience.
Specification
- Intel Core i9-13900KF, 16 cores / 24 threads (up to 5.8GHz)
- 128GB DDR5 5200MHz RAM (4 × 32GB)
- 2TB M.2 PCIe NVMe SSD for the operating system
- 1TB M.2 PCIe NVMe SSD for temp / cache
- 2TB M.2 PCIe NVMe SSD for case management
- 4TB SSD in Rapid Mode for processing
- NVIDIA RTX 4070 Ti OC, 12GB GDDR6X
- 18TB HDD for images and data
- 2.5″ & 3.5″ true hot-swap bay
- Front USB 3.2 Gen 2 panel (2× Type-C, 2× Type-A, 2× QC 3.0)
- Blu-ray burner with 128GB BDXL support
- BitMindz / Logicube WriteProtect bay (IDE, SATA, SAS, USB, FireWire, PCIe/M.2)
- Forensic media card reader
- 1300W Gold-rated PSU and advanced CPU cooling
- Windows 10 Professional 64-bit
- 3-year warranty on the entire system
Need something different? Custom configurations are available on request.
Flexible Licensing
Monthly Mac Licenses for TRIOS & NETRE
Get a license whenever you need one, for as long as you need it. Message us on WhatsApp for current pricing.
NBFTools TRIOS Mac License
Forensic analysis on Apple Mac, Windows and Linux, covering images from macOS, Windows, Linux, servers and USB drives.
- Windows: not available
- Linux: not available
- macOS
NBFTools NETRE Mac License
Triage and acquisition with Apple Silicon Mac acquisition, T2 decrypted images and selective acquisition.
- Windows: not available
- Linux: not available
- macOS
Frequently Asked Questions
How do I get a monthly license for TRIOS or NETRE?
Send us a request on WhatsApp (+91 99635 67070) or email info@noahforensicsolutions.com and we will arrange your license.
How long is a monthly license valid?
A monthly license is valid for 30 days from activation.
Can I transfer my license to another device?
No. The license is tied to the USB serial number you provide and cannot be transferred to another device.
NBFTools
Digital Forensic Services
Forensic Imaging
We image Windows and Linux desktops, laptops and devices such as the Microsoft Surface Pro. Our Mac forensics expertise covers every generation of Apple Mac, including Apple Silicon.
Read More about Forensic ImagingForensic Analysis
Along with imaging, we analyse forensic images and other data sets across a wide variety of file systems, operating systems, mobile devices and cloud data.
Read More about Forensic AnalysisConsultation Services
Beyond imaging and analysis, we help you design your digital forensic processes, from first-response jobs to lab examinations, and set up your lab.
Read More about Consultation ServicesProfessional Services
Expertise that stands up in court
Certified examiners supporting law enforcement, legal teams and enterprises from acquisition to expert testimony.
Forensic Imaging
Forensically sound imaging, wherever the evidence is
We image Windows and Linux desktops, laptops and devices such as the Microsoft Surface Pro, and every generation of Apple Mac, including the latest Apple Silicon machines. Every image is hashed so it can be verified at any time.
-
Mac Forensics Expertise
All generations of Apple Mac, including Apple Silicon M-series machines.
-
Windows & Linux Machines
Desktops, laptops and specialist devices imaged to forensic standards.
-
Targeted Data Collection
Collect only what matters, by user profile, application or custom filter.
-
On-Site & Off-Site
At the scene, in your lab or in ours, with chain of custody maintained throughout.
Forensic Analysis
Analysis that turns data into admissible evidence
We analyse forensic images and other data sets across file systems, operating systems, mobile devices and the cloud, from Apple Mac, iPhone and iPad to Windows and Linux servers. Our findings come as forensically accurate reports, ready to print, share or present in court.
-
Extensive Capabilities
Apple Mac, iPhone, iPad, Windows, Linux desktop and server file systems.
-
Mobile & Cloud Data
iOS extractions and evidence held in cloud services.
-
Court-Ready Expert Reports
Clear findings for technical and non-technical readers, with expert testimony when required.
-
Forensic Standards
Evidence integrity and chain of custody preserved at every step.
Consultation
Build a forensic capability that works
Beyond imaging and analysis, we help you design your digital forensic processes, from first-response jobs to lab examinations. We also draw on our hardware and software expertise to help you set up a complete forensic lab.
-
Process Design & Optimisation
Workflows for first responders and lab examiners, built around your organisation.
-
Digital Forensic Lab Setup
Layout, equipment, networking, storage and security for a working lab.
-
Hardware & Software Expertise
Independent guidance on choosing and deploying the right tools.
-
Continuous Support & Training
Ongoing help and training to keep your team current.
Forensic Training
Master digital forensics with expert training
Hands-on courses for examiners at every level, from basic system analysis to advanced data recovery, using industry-standard tools and methods. Take online courses for flexibility or in-person sessions for more interaction. Our instructors have trained professionals across North America, Europe and Asia.
Comprehensive Curriculum
File system analysis, web activity, encryption and deleted data recovery across macOS, Windows and Linux.
Customised to Your Needs
Training shaped around your goals, from first steps to expert level.
Hands-On Training
Practical, real-world exercises that prepare you for live investigations.
Expert Instructors
Seasoned practitioners with 15+ years of casework and a decade of teaching.
Training Highlights
-
01
Courses for All Skill Levels
Designed for novice and expert examiners alike.
-
02
Comprehensive Filesystem Forensics
APFS, HFS+, NTFS, ext4, exFAT and FAT.
-
03
Advanced System Artifact Analysis
System configuration, login history and usage timelines.
-
04
Web Activity Recovery
History, downloads and bookmarks from all major browsers.
-
05
Encryption & Security Handling
macOS security, FileVault and third-party encryption.
-
06
Deleted Data Recovery
Snapshots, data carving and Time Machine backups.
-
07
First Responder Training
Volatile data acquisition and evidence seizure on macOS and Linux.
-
08
Flexible Delivery
In person, on-site or in virtual classrooms.
-
09
Customisable Learning Paths
Programmes that adapt to your needs and experience.
No Hidden Costs
Clear pricing and a simple agreement. Nothing starts until you say go.
Assistance & Guidance
We work closely with you so the programme fits, and we are on hand for questions.
Evolve with Technology
Hands-on experience with industry-leading tools and current techniques.
Our methodology
-
Forensically Sound Practices
Industry-standard, repeatable procedures aligned with ISO/IEC 27037 guidance.
-
Data Integrity Assurance
Cryptographic hashing and full chain-of-custody documentation at every step.
-
15+ Years Expert Team
Seasoned examiners with extensive casework and courtroom experience.
Need defensible digital evidence?
Talk with a senior examiner about your case, your devices, and your timeline. Confidential and obligation-free.
WhatsApp or call +91 99635 67070
NBFTools
- Powerful and User-friendly
- Free tools training online
- Co-branding and customisation available
Book a demo now for free at info@noahforensicsolutions.com
Book Free Demo Now