Observed arrival · 2026-10-08
InVitro puts forensic imaging and recovery in one case
InVitro is pre-release Windows software for imaging drives, recovering files, analyzing evidence, and producing forensic reports within a single case file.
- For
- Windows digital-forensics examiners and investigators
- Worth noticing
- A demo case combines a VHDX, GPT partitions, an E01 image, and a split raw image with one segment missing.
Field notes
The site lays out a layered evidence workflow: an image or virtual disk can contain partitions, filesystems, encrypted volumes, and even another image file, with detection repeated on what each layer reveals. Its demo case includes several distinct evidence types, including a split raw image missing a segment. The page also describes a failing-drive profile that revisits read errors and retains a per-sector read map in its .ivi output.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue