Limitations of the free version

From truxwiki.com
Jump to navigation Jump to search

Thanks for using the free version of Truxton.

Description

The free version of Truxton provides enough functionality to perform an investigation but not enough to fit into business solution. The features that are removed are for more advanced investigations, cross-case correlations, data ingest speeds, etc. No forensic capability has been disabled.

Missing Functionality

Here's what your missing:

  1. Maximum of 25 Media - You cannot load more than 25 pieces of media into the free version of Truxton. If you reach this limit you will need to delete existing media before loading new media.
  2. Local machine only - Truxton can spread forensic processing across any number of machines but not the free version. You cannot connect to another instance of Truxton on your network. Other computers cannot participate in the exploitation of media being loaded on this machine. If you need multiple analysts to work on the same media at the same time or you have hundreds of media that need loading, please upgrade.
  3. Prism Loads - A prism load is where you have used multiple tools to image a phone then load each of the images into a single media eliminating duplicates. Even if you have a logical pull, physical image and backup of the same phone, the analyst won't have to look at three different views of the device, just one unified piece of media. You cannot combine the images taken from multiple tools into a single media to analyze.
  4. Differential Loads - You cannot use an existing piece of media to eliminate files in a new piece of media.
  5. Maximum of 5 instances of ETL processes - You won't be able to have Truxton use all of the resources your computer can provide.
  6. CASE output - Exporting in CASE format is disabled.
  7. Multiple Load processes when processing Load Lists - You can only load one media at a time.