AD Lab

Large-Scale Investigation and Processing


Why You Want It

Divide and conquer with AD Lab. This proven tool helps you power through massive data sets, handle various data types and run multiple cases at the same time, all within a collaborative, scalable environment. AD Lab uniquely enables distributed processing, allowing investigators to utilize additional hardware to dramatically increase their case processing and resolution speed.

While a single-person lab can radically speed up their processing using the four-worker distributed processing engines (DPEs) available with FTK®, labs handling massive data sets, utilizing a distributed workforce, or looking to collaborate with attorneys, HR or other parties, can step up to AD Lab.

As a centralized investigative platform, AD Lab adds powerful web-based review functionality and expanded DPE capabilities (up to 16 with the 6.2 release) with a centralized processing farm and centralized database infrastructure. With AD Lab, you get the fastest processing available on the market with virtually limitless scalability (depending on your own hardware). And AD Lab’s state-of-the-art data visualization drives you to deeper analysis by uncovering relationships and patterns that make better decisions possible.






The centralized database architecture and one shared case database keeps all parties on the same page and allows you to work through your cases at a record pace. With the web-based review system, non-technical users (attorneys, HR personnel, outside experts) can participate in the process without delay, regardless of their location.


AD Lab is now the first product in its category to be available to users in acloud-based environment

缩放您的环境和控制成本,仅在云中使用New AdLab®时使用您使用的内容。

  • 通过在云环境中安装实验室并携带自己的许可证(Byol)来保存硬件。
  • Pay only for what you need, with the ability to scale computing and storage.
  • Purchase computing based on what you need in an operating budget instead of a capital budget.

AD Lab is now available on Amazon Web Services and can be obtained on theAWS市场。You’ll be asked for your Lab license to gain access. Watch for the release on Microsoft Azure very soon!

Ready to prepare and deploy your AD Lab Environment in the cloud? Download the Stepshere

Large-Scale Investigation and Processing

当您需要快速处理巨大的数据集时,请同时处理各种数据类型并运行多个案例,AD Lab有助于征服您的Caseload,全部在协作,可扩展的环境中。


Capabilities to Empower You

  • 解析更多的注册表和Windows事件in an easy to read, interactive and reportable Windows System Information tab. Also标签,书签和导出每个类别的单个对象,允许轻松搜索,过滤和报告。
  • 支持解密文件拱顶2from the APFS file system.
  • QView™ integrationintroduces a simple, intuitive and customizable review interface. Utilize multi-case functionality such as tagging, searching, labeling and bookmarking across multiple cases. Enjoy easy mobile chat application and multimedia review, along with similar face and image detection all backed by a unified database. And, a panels-driven interface means that you can customize the view to your liking.
  • Export your data into aportable casefor offline review and sync back labels, bookmarks, comments and notes to the original case. Reviewers will also appreciate the ability to view the data in a near-native format.
  • Similar face and object detection允许调查人员在此外壳中快速定位人或对象的所有图像,而无需培训系统,这可以利用有价值的时间和资源。此外,从外部上传图像,并将其与当前情况下的图片进行比较,而不会摄取它。
  • Get a head start on your investigation withURL detection and parsing capabilities在没有考虑到浏览器的设备上,整齐地组织在一个部分下,可以轻松查看数据并在调查中连接点。
  • FTK将摄取和支持LX01和E01图像的更新版本
  • Automatically import and expand a nested forensic image withimage within an image support
  • Import and parse AFF4 imagescreated from Mac®computers (generated by third-party solutions like MacQuisition by BlackBag).
  • 解析XFS文件系统when investigating and collecting from RHEL Linux environments.
  • Leverage the power of your forensic environment withoptimized support for unified database for the AWS/Amazon RDS configuration.在AWS中托管您的FTK数据库以上传,流程和审查无与伦比的速度和可扩展性。
  • Cut down on OCR time by up to 30% with our efficientOCR engine.
  • 找到,管理和过滤移动数据more easily with a dedicated mobile tab. Use the message application filter to quickly isolate data from message applications like WhatsApp or Facebook.
  • View all associated EXIF data,包括用于捕获图像或视频的设备的位置,制作和模型。
  • Colect,process和分析包含Apple文件系统的数据集已加密,压缩或删除。
  • Decrypt a computerdrive encrypted by the latest version of McAfee Drive Encryption and new L01 export support which eases the workflow of users when data must be used within multiple tools.
  • 缩放您的环境and pay only for what you use with reliable cloud processing and storage for AD Lab, available in Amazon Web Services™.
  • Web-based UIallows easy collaboration with your wide range of teams.
  • Granular user controls提供对数据的访问与每个人的相关part of the investigation. Dividing the evidence creates a more efficient and secure workflow.
  • See all active jobsand easily change job processing order based on changing priorities without affecting progress.
  • 执行MultiPASS数据审查并在不重新加工数据的情况下更改索引选项。
  • 第三方整合provide the ability to share more hash data with Project VIC integration; and iSubmit® users will benefit from new integration.
  • 自动发送电子邮件通知at more case milestones for more users; automatically expand audit log and evidence tracking detail to improve chain of custody documentation.
  • Multi-machine, forensic analysis with wizard-driven processing, filtering and reporting.
  • Analytics that allow you to see relationships and patterns that will help make decisions faster withstate-of-the-art data visualization
  • Configure and change the weighting criteriafor sort after a search to reveal the most relevant results. Customizable processing profile buttons help create a set of standards for processing particular types of investigations.



  • Jump over to Resources for additional product brochures, case studies, white papers, as well as on-demand videos and more.RESOURCES
  • View our library of on-demand video tutorials.查看教程





Dead-Box Forensics

AD Enterprise


AD eDiscovery®

Corporate Collection & ECA



approach to improving how you collect, analyze and use data.
Tell Me More