Digital forensic investigation, no shortcuts.
A single platform to analyze disks, mobile devices, cloud, email, memory, network, voice and AI assistants. Built by investigators, for investigators.
One tool. All the evidence.
Prisma Pro brings together in a single interface what today forces you to jump between five different products. It processes the evidence, organizes it by category, cross-references it and presents it ready for your report.
Complete coverage
Windows, Android, iOS, macOS, Linux, cloud, email, network and memory. More than 140 artifact types supported natively.
360° view of the suspect
We automatically cross-reference identities, devices and conversations across every source. What in other tools are loose threads, here becomes a single story.
Verifiable chain of custody
Every finding keeps its origin, its hash and its trail. Built to hold up before an opposing expert and before a court.
Gentle learning curve
Every view follows the same visual language. Search, tags and preview work the same way in email, in chats and in files.
Key capabilities
What normally takes days, Prisma Pro presents on a single screen.
Disks and memory
- E01 and raw forensic images (DD, IMG, split)
- Deleted file recovery (MFT, USN, unallocated space)
- RAM memory analysis (processes, connections, malware)
- Live acquisition with Volume Shadow Copy
Mobile devices
- Android and iOS extractions (UFDR, GrayKey, FFS, .pep)
- More than 15 chat applications supported
- Chat view with real bubbles, calls, locations, polls
- Forensic limitation reports when acquisition is incomplete
Cloud and email
- Google Takeout, Apple iCloud, Fitbit, Office 365 backups
- Email in PST, OST, EML, MSG, MBOX
- S/MIME signature verification
- Attachments analyzed as nested evidence
Network and communications
- PCAP capture with TLS decryption when the key is available
- HTTPS traffic fingerprinting (JA3 / JA3S)
- Reconstruction of DNS and HTTP conversations
- Voice notes and audio transcribed automatically
Intelligence and enrichment
- Reputation lookups for hashes, IPs and domains
- Detection with updatable YARA rules
- Forensic indicators configurable per case
- AI assistant conversations (ChatGPT, Gemini, Copilot, Claude)
Search and discovery
- Global chronological timeline
- Combined search: text, regular expression, time range, tags
- In-file search (PDF, Office, email, compressed archives)
- Photo and video viewer with thumbnails, hashes, camera and GPS
Relationship visualization
- Interactive graph of who talked to whom
- Unified identity: groups aliases, phones and emails of the same person
- Detection of central actors and paths between two nodes
- Automatic communities over the graph
Remote acquisition
- Live triage over authorized workstations
- Windows, Linux and macOS support
- Full audit trail and signing of every package
- No hidden install: the agent deploys transparently
Designed for the operator.
Software should not be one more obstacle in the investigation.
Modern design
- Light mode and dark mode
- Consistent interface across every view
- Independent windows to work in parallel
Tagging and comments
- Persistent tags and notes on any finding
- They survive reprocessing of the evidence
- Ready to include in the report
Documentation included
- Contextual help with F1 in every panel
- More than 200 technical sheets per artifact type
- Available in English and Spanish
Examiner isolation
- Nothing from the examiner’s machine mixes with the evidence
- Paths and origins always relative to the exhibit
- Read-only mode for third-party review
Evidence is complex by nature. Software does not have to be.
Who is it for?
Prisma Pro supports the daily work of those who investigate seriously.
Why Prisma Pro.
One product, one learning curve
No separate licenses per module. Disk, mobile, cloud, network and memory are all included in the same price.
Built with real investigators
Designed in collaboration with active examiners, not in an isolated lab. Every decision answers to a real case.
Continuous updates
New parsers, new integrations and interface improvements in every development cycle.
Real support, in your language
Documentation and technical support in English and Spanish. No barriers when solving a case under pressure.
Get your next case to the truth, sooner.
Request a guided demonstration with a real test case. In fifteen minutes we show you what normally takes a week.
Request a demo