Rocket Forensics is a cloud-native platform for remote data preservation and digital forensic collection, used in eDiscovery, corporate investigations, and litigation support. It replaces on-site hardware collection and installed forensic agents with a remote, link-based collection process for Windows and iOS devices.

Key Features & Functions: 

Agentless Remote Collection
Deploys via a secure link without installing persistent software, agents, or drivers on the target device, according to the vendor.

Cross-Platform Evidence Collection
Supports full-disk bit-level E01 imaging and targeted forensic 7zip archives from Windows devices, and logical or targeted extraction of SMS, iMessage, WhatsApp, WeChat, call logs, and application data from iOS devices.

Cryptographic Chain of Custody
Calculates dual-pass SHA-256 hash values at the time of capture and applies RFC 3161-compliant timestamps to generate chain-of-custody documentation and forensic reports.

Encrypted Transit and Storage
Encrypts evidence in transit using TLS 1.3 and at rest using AES-256, with FIPS 140-2 compliant encryption cited by the vendor. Data streams to a client's private AWS S3 environment, on-premises data center, network share, or local storage.

Targeted Filtering
Offers filtering by date range, file type, hash value, or communication participant to narrow the scope of a collection.

Automated Collection Resilience
Monitors for shutdowns or network interruptions during a collection and is designed to resume automatically without manual intervention, per the vendor.

Review Platform Integration
Provides load-file exports and API-based integration with review platforms including Relativity and Reveal.