Disk cloning and imaging, even under DOS  (forensically sound)

Examining the complete directory structure inside raw image files, even spanned over several segments

Native support for FAT, NTFS, Ext2/3, CDFS, UDF

Will interpretate RAID systems and dynamic disks

Viewing and dumping physical RAM and the virtual memory of running processes

Various data recovery techniques and file carving (hundreds of file signatures can be acheived from FileSig)

Hard disk cleansing to produce forensically sterile media

Gather slack space, free space, inter-partition space, and generic text from drives and images

File and directory catalog creation for all computer media

Can detect and access NTFS alternate data streams (ADS), even where Encase and ILook fail

Can do mass hash calculation for files (CRC32, MD5, SHA-1, SHA-256, PSCHF, ...)

Do not depend exclusively on MD5 (NO collisions in MD5)

Do physical and logical search for many search terms at the same time

Do Bookmarks/annotations

Do Bates-numbering of files

...and then some:

Support for the filesystems HFS+ (Apple), ReiserFS, Reiser4 (Linux), UFS, UFS2

Gallery view for pictures (supports JPEG, JPEG 2000, GIF, TIFF, Bitmap, PNG, TGA, PCX, WMF, EMF, MNG, and JBG)

Will write protect to ensure data authenticity Detection of filename/file type mismatches (e.g. JPEG file concealed as .exe)

Complete case management

Do activity logging (audit logs)

Do reports that can be imported and further processed by any other application that understands HTML, such as MS Word

Can add comments to files and directories in volumes/images

Will tag files and add them to a table of notable items

Can do directory tree giving you the ability to explore and tag directories including all their subdirectories

Will synchronize the sectors view with the file list and directory tree

Dynamic filtering based on file type category, hash set category, timestamps, ...

View all existing and deleted files on media by file type category (documents, images, Internet, ...), disregarding the subdirectory structure, fully customizable for you

Identification of encrypted MS Office and PDF documents

Find and list pictures embedded in documents (e.g. MS Word, PDF, PowerPoint) automatically

Can reload previously created contents tables  

View Windows Registry files (all Windows versions); supply Registry report

Seamless integration view for over 200 plus file types

Do file preview signature check

Calendar (timeline view)

Do logical search, in all or selected files/directories, following fragmented cluster chains, decompressing NTFS-compressed files and nested ZIP, RAR, ... archives, optionally also decoding PDF, WPD, ... plaintext

List the contents of archives in the directory browser

Search hit context preview

Skin color detection (e.g. a gallery view sorted by skin color percentage greatly accelerates a search for traces of child pornography)

Match files against the internal hash database

Can import NSRL RDS 2.x, HashKeeper, and ILook hash sets

Create hash sets

Can read and write evidence files (.e01 images), optionally with 256-bit AES encryption

Can copy relevant files to evidence file containers

Detection of host-protected areas (HPA), a.k.a. ATA-protected areas