The plugin Minidump is very useful as it allows you to select specific items to include in your UFED container by scanning your data collection to see what it can offer. It is particularly useful in eDiscovery or consulting-type cases where there are restrictions to what you can provide for examination. 

With this plugin, you can choose relevant categories and create minidumps only of the selected items.

Upon completion, you can load a Minidump and go to the filesystem to see every file that is relevant. All parsed information is listed under the “Analyzed Data” section. The Minidump plugin is great for research and important for investigations involving controlled data.

Share this post