Understanding the New IEF Editions, Modules and Pricing

After listening to customer feedback over the last few years, the Magnet Forensics team has worked diligently to add a host of new features to Internet Evidence Finder (IEF) to help our customers recover and analyze more artifacts.

In June of 2013, we added a Mobile Artifacts Module to enable the recovery of Internet and application data from iOS and Android smartphones and tablets. And in June of 2014, we will introduce a new Business Applications and OS Artifacts Module to further expand the types of artifacts you can find with an IEF search.

As IEF has evolved as a product, we’ve had to change the way we name and organize licensing for the various editions and artifact modules. With the up-coming introduction of the Business Applications and OS Artifacts Module, we felt it was the right time to re-structure your IEF purchasing options.

The Goal: Give our customers the power to customize their IEF license(s) to meet their investigative needs (and budget) by adding artifact modules.

We realize that these changes may cause some confusion, so here’s a quick rundown of what we offer today, and how we will be packaging IEF moving forward…

We currently offer five editions of IEF:

1. IEF Standard
2. IEF Advanced
3. IEF Triage
4. IEF Standard + Triage Bundle
5. IEF Advanced + Triage Bundle

Starting in June, we will offer three editions of IEF:

1. Internet Evidence Finder
2. Internet Evidence Finder Triage
3. Internet Evidence Finder Bundle (includes IEF and IEF Triage)

Which you can then customize by adding-on two (optional) artifact modules:

1. IEF Mobile Artifacts Module
2. IEF Business Applications & OS Artifact Module

Your new options are best summarized in the following table:

* IEF Triage supports live system investigations for Windows computers. Mobile artifacts module is not supported with Triage.

Selecting the IEF Edition That’s Right for You:

IEF, IEF Triage or IEF Bundle

Selecting the right IEF edition depends on the types of investigations you work on:

IEF

• Designed for use in a lab environment on a forensics workstation
• Recovers 260+ unique Internet artifacts from Windows or Mac file systems
• Pricing starts at $1,549

IEF Triage

• Designed for use on live systems in the field
• Recovers 260+ unique Internet artifacts from Windows or Mac file systems
• Runs directly from the USB thumb drive on a target computer, and is particularly valuable for running a quick search on-scene, taking a live RAM capture, and/or checking for disk encryption
• Pricing starts at $1,799

IEF Bundle (incl. standard IEF license and IEF Triage)

• Designed for investigators (or forensic teams) who work in a lab environment and in the field on live systems
• Get both our standard and triage licenses together on a single USB dongle for added convenience and costs savings (use both IEF editions without having to pay for two separate licenses)
• Pricing for the bundle starts at $1,999 (save 58% compared to the cost of purchasing and maintaining two separate licenses)

IEF Add-on Artifact Modules

You’ll soon be able to add-on one, or both of our artifact modules to customize your IEF license(s). Here’s more information on what our artifact modules will include, and how they can be used with other tools.

Mobile Artifacts Module:

• Recover 165+ types of mobile artifacts from iOS and Android powered smartphones and tablets, including more 3rd party mobile apps than you can recover with traditional mobile forensic tools (because of our innovative approach to carving evidence from deleted space)
• This module is designed to analyze images acquired from mobile phones via popular mobile forensic tools like Celebrite’s UFED, Micro Systemation’s XRY and Accessdata’s MPE+
• Add the Mobile Artifact Module to your IEF License for $600

Business Applications and OS Artifacts Module:

• Recover Business and OS artifacts from computers and mobile devices, including: corporate email and instant messaging artifacts like Outlook OST & PST files, mbox email archives, and Microsoft Lync/OCS IM; documents like .pdf, .doc, .docx, .xls, .xlsx, .ppt, .pptx; and operating system artifacts like user accounts, USB device history, lnk files, prefetch files, shellbags, jumplists, event logs and more
• This module extends IEF’s search capabilities to include recovery of business application artifacts, so you can get a more complete view of the user’s activity on a computer and/or mobile device
• Add the Business Applications and OS Artifact Module to your IEF license for $600

Pricing

* First Year SMS Included with License

IEF Pricing and Licensing FAQ

What is happening to IEF Standard?

IEF Standard is the name that we have used to describe our standard Internet Evidence Finder license. Starting in June, we will still refer to this version as our ‘standard license’ informally, but are dropping the word ‘Standard’ from the product name – so it will just be ‘Internet Evidence Finder’. Rest assured; our standard license is not changing. We just want to keep it simple with the name!

What is happening to IEF Advanced?

IEF Advanced is the name that we have used to describe a bundle that will soon combine IEF with our Mobile Artifacts Module.  Starting in June, we will drop the word ‘Advanced’ from the product name. All of the features previously included with IEF Advanced will now come with our standard IEF license and the Mobile Artifacts Module. The price to purchase a license and SMS will remain the same.

If you have already purchased an IEF Advanced license, your license is still valid.  Your IEF Advanced license is exactly the same as a new IEF license with the Mobile Artifacts Add-on Module. All of the features, including the price of annual SMS remain the same.

Why are you offering these add-on artifact modules?

We work closely with customers to identify opportunities to improve IEF. Expanding the breadth of artifacts IEF supports is a very common request. We’ve learned from experience that each time we decide to tackle new initiatives (like introducing support for mobile or business application artifacts) we must expand our support and development team to ensure the quality of IEF remains the same.

In the spirit of full disclosure, adding support for new artifact categories is a huge financial commitment for Magnet Forensics. We were faced with some tough decisions:

Do we add the new artifacts into IEF, and then increase the price of an IEF license and SMS for all customers?

Or, do we let our customers customize their IEF license(s) by purchasing the optional, add-on modules that they want/need?

After considering both possibilities, we decided to go with option #2, as we believe that giving you the choice to customize your license to meet your needs is the best way to handle things moving forward.

I already own an IEF Advanced license. What do these changes mean to me?

If you have already purchased an IEF Advanced license, it is still valid. Your IEF Advanced license is exactly the same as a new IEF license with the Mobile Artifacts Add-on Module.  All of the features, including the price of annual SMS remain the same.

If I already own an IEF license, how do I get these add-on artifact modules?

As a current IEF customer you can add either artifact module to your existing IEF license at anytime. To purchase, please contact us at sales@magnetforensics.com or call +1 (519) 342-0195.