DP2C is a data targeted collection tool for triage forensics. Sometimes, a full forensic image isn't necessary or feasible. DP2C is special software that runs from a USB drive and allows you to collect specific type of data from Windows based systems to your own evidence drive. Free with any puchase of P2C. You can choose the forensic mode which is bootable preventing any data from being written to the suspect system Targeted triage data collections. or you can run it on a live system. You can choose from a standard triage collection that targets the most common types of data that contain evidence or you can target specific files. DP2C comes free with P2C.

Targeted Triage Collections

Deployabel P2 Commander (DP2C) allows examiners to target specific types of data from a PC for forensic collection into encrypted forensic containers. Once the data is collected, full forensic analysis is performed using P2C. Users can perform a non-forensic collection on a running machine or boot into the forensic mode for a completely forenensic grade collection.

Standard Collections

A default data collection of the most common areas that evidence resides on a Windows based system can easily be performed in one simple step. Just start the standard collection and DP2C will gather all email databases, chat logs, internet browser data, My Documents, and Recently Used Files associated with the Windows Registery for all users with the click of a button.

Specialized Collections

If you want to target specific file types for your collection, you can specify what is collected. Collect images, videos, documents, etc. by marking your selections and hitting go. This type of collection is more thorough as it bases collection on file headers rather than registry entries.

Secure Forensic Containers

No matter what type of collection you do, your collected evidence is stored in a proprietary encrypted forensic container. Specify the location of the container (your own evidence drive) and set a password. Once data is collected, you can load the container into P2C or mount it as a drive using P2 eXplorer.