DriveLook is a forensic drive investigation and search tool. DriveLook scans a drive or a partition of a drive for text strings and stores them in a table. After completion of the scan, you can browse the table and view where the words were found. The search function allows you to do fast inquiries for combinations of words.
Investigate a drive for suspicious content. See what others put on your computer. Find traces of user activity. Collect evidence for litigation purposes. The program enables you to index a hard drive for all text that was ever written to it, browse a list of all words stored on the drive, search for words or combinations of words, view the location of words in a disk editor, switch between several views such as hex and text view, use physical drives or logical drives as an input,?use image files as an input, and access remote drives over serial cable or TCP/IP.