By performing a Forensic Export, you can export an encrypted session in order to view its monitored data on any computer, even without having access to the Management Tool.
The session is exported to an .efe file that can be played back with the Ekran Forensic Player.
NOTE: You can download the Ekran Forensic Player on the Forensic Export History page.
You can verify the integrity of the exported session using the SHA256 hash displayed on the Forensic Export History page.
Table of Contents
- Exporting a Session Fragment
- Exporting a Full Session
- Exporting Multiple Sessions
- Viewing the Forensic Export History
- Playing an Exported Session
- Validating Exported Data