Analyse forensique et récupération d’images disque et de supports optiques pour macOS.

Forensic Capabilities

Built for damaged media, unlinked records, and bit-accurate extraction.

• LBA+00

  Simultaneous Multi-Layer Volume Inspection

  Hybrid discs and bridge images often hold ISO 9660, Joliet, Rock Ridge, UDF, and Mac HFS+ trees on the same track. IsoHappy mounts every layer side-by-side so you can compare directory structures and rescue files from whichever descriptor survived.

• LBA+10

  Deep Undelete Across NTFS, HFS+, FAT/exFAT & EXT

  Scans unallocated NTFS $MFT records, replays HFS+ .journal transaction blocks, inspects FAT/exFAT 0xE5 directory entries, and walks Linux EXT directory slack to surface unlinked files with their original filenames and LBA extents.

• LBA+20

  Signature Carving + Custom .rules Engine

  When partition tables or directory B-trees are overwritten, Find Missing Files and Folders sweeps raw sectors for 25+ built-in headers and footers (JPEG, PNG, PDF, ZIP, MP4, WAV, SQLite) plus custom IsoBuster-compatible .rules scripts.

• LBA+30

  Verify-First In-App Preview (< 5 MB Free)

  Inspect recovered images, play back carved WAV/CD-DA audio, browse ZIP/Office archive entries, validate PDF %%EOF markers, or read UTF-8/UTF-16 text and hex slices directly in-app before spending a cent.

• LBA+40

  Managed Images (.ibp / .ibq) & Multi-Pass Rescue

  Clone failing media into a bitmap-tracked .ibp/.ibq managed image pair. Re-try unreadable sector ranges across multiple optical drives and watch bad LBA blocks turn green as good sectors fill in.

• LBA+50

  Tactile LBA Sector Workbench & DFXML v1.2 Audits

  Scrub across Logical Block Addresses with a mechanical jog-shuttle dial, inspect decoded volume descriptors alongside raw 2048/2352-byte sectors, verify MD5/SHA-1/SHA-256 digests, and export NIST-standard DFXML v1.2 forensic manifests.