FIT is Windows-Based Content Forensics Toolkit to read and analyse the content of the Internet raw data in PCAP format. FIT provides security administrative officers, auditors, fraud and forensics investigator as well as lawful enforcement officers the power to perform content analysis and reconstruction on pre-captured Internet raw data from Wired or Wireless networks. Developed by Decision Group experts, FIT and E-Detective series of products have now been used extensively by Private and Public organizations, Law Enforcement and Defence Officers and Investigators.

FIT comes with very user friendly Graphical User Interface (GUI) that even allow novice to easily learn and capitalize on the powerful functionality and features of FIT. All protocols and services analysed and reconstructed are displayed in readable format to the users. The GUI is much easier to navigate and operate compare with many of the packet analyser tools. The other uniqueness of the FIT is the imported raw data files will be immediately parsed and reconstructed. Unlike other packet analyser or reconstruction tool that requires the user to manually reconstruct them session by session. Therefore, the immediate parsing and reconstruction of the raw data imported allows all the parsed data to be displayed on the intended service categories. That makes the investigator task much easier on viewing the output results.

Features

• Application Software Tool (Windows based)
• Case Management Function
• Support Import of Raw Data Files (in PCAP Format)
• Detail information includes Date-Time, Source IP, Destination IP, Source MAC etc.
• Search Function (Full Text Search)
• WhoIS and Google Map Integration Functions
• Bookmark Function
• Analysing and Reconstruction of various Internet traffic types which includes Email (POP3, SMTP, IMAP), Webmail (Read and Sent), IM or Chat (MSN, ICQ, Yahoo, QQ, Skype Voice Call Log, UT Chat Room, Gtalk, IRC Chat Room), File Transfer (FTP, P2P), Telnet, HTTP (Content, Upload/Download, Video Streaming, Request) and Others (SSL).