BlackLight® computer forensic software by BlackBag enables you to quickly analyze computer volumes and mobile devices to shed light on user actions. With easy searching, filtering and sifting through large data sets, it’s simply the best software available for smart, comprehensive analysis.

windows forensics

Mac Support

An unrivaled, easy to use interface.
  • Supports the latest systems including: T2 chip,
    Fusion and encrypted devices
  • Review history in APFS Snapshots and Time
    Machine backups
  • Display and Search Spotlight metadata
  • Review network connections, recent documents,
    user activity and more

Read our BlackLight Quick Start Guide here.

Windows Support

The trusted tool for smarter analysis.
  • Review device history from Microsoft Volume
    Shadow Copies
  • Built-in Windows Memory and Windows
    Registry analysis
  • Automatically parse account information, recent
    documents, downloads, recycle bin, USB
    connections, and more
windows forensics
windows computer forensics

Support for iOS, GrayKey and Android

Continuous innovation for all devices.
  • Easily view message conversations
  • View location data information for pictures
  • Report on all device messages, applications, or
    contacts with simple report options

Compatibility & Requirements

BlackLight Resources

Request Your Free Trial

Want to see how easy it is to add BlackLight to your toolkit?
Experience the powerful data capabilities of BlackLight by loading your case data to see for yourself.