Skip to content

Release Notes

Release Date: March 2026

Welcome to LLIMAGER 6.0 – the most secure, accessible, and performant version of the forensic imaging software to date.

New Features in LLIMAGER 6.0

  1. Signed PDF Acquisition Logs
    Generated automatically at the end of each collection
    Digitally signed with a strong cryptographic signature
    Any unauthorized change after signing becomes immediately detectable
    Provides court-admissible chain-of-custody documentation

  2. Accessibility & Compliance (VPAT)
    Interface redesigned and tested for VPAT conformance
    Enhanced compatibility with screen readers and other assistive technologies
    Improved keyboard navigation, focus management, and color contrast
    Broader usability across diverse user needs and environments

  3. LLSmartVerify LLIMAGER Integrated Image & Acquisition Log Integrity & Management Framework

    A low cost per transaction add-on framework that leverages immutable, public blockchain-anchored smart contracts and the LLSmartVerify portal to secure acquisition log metadata including assuring complete trust in the foundation chain-of-custody event, and provide enterprise level LLIMAGER licensing and aqcuisitions management and essential reporting. The blockchain anchoring approach eliminates the uncoupled state of side-car acquisition logs seen in DMGs, and DD images. LLIMAGER's, LLSmartVerify couples the image to the external log while detailed provenance and chain-of-custody data live in tamper-evident, blockchain-anchored records. This provides the strongest non-repudiation, independent verification, and resistance to post-acquisition tampering.

  4. Enhanced Diagnostics & Performance
    Core engine optimizations → significantly faster processing and acquisition times
    Specific Error Messaging → Detailed, actionable messages and troubleshooting guidance when interruptions or issues occur during imaging workflows

    Core Components of the LLSmartVerify Framework

    The system comprises four tightly integrated elements:

    1. LLIMAGER — The macOS forensic imaging application that performs the acquisition and generates the evidence image plus a detailed acquisition log.
    2. Tamper-Evident PDF Acquisition Logs — Automatically created at the end of each collection; cryptographically signed and embedded with a unique QR code seal.
    3. Mobile Devices — Examiners use the LLIMAGER Companion mobile app (iOS/soon to be released, Android) to scan the QR code immediately after acquisition and anchor on blockchain.

    4. Smart Contracts — Public accessible blockchain-based smart contracts that immutably store the acquisition log metadata (hash-only), ensuring non-repudiation that addresses:

      • What tool and license imaged the evidence (LLIMAGER and License Serial Number);
      • What was imaged (evidence serial number);
      • When the evidence was imaged;
      • When the acquisition log's QR code was scanned by the examiner (via mobile device);
      • Where it was imaged (GPS coordinates, with ability to view map);
      • When (TSA timestampt) the evidence acquisition log metadata was submitted to the blockchain; and
      • When (TSA timestamp) the evidence acquisition log metadata was added to the blockchain and smart contract

    5. LLSmartVerify Portal — Online portal with:

      • Comprehensive inventory management/tracking/stats related to the LLIMAGER licenses, and the images created by each -- no more manual tracking of licenses and images. Ideal for multi-license customers and larger e-Discovery providers with licenses spread across different locales;
      • Administrative component that manages user and 3rd party viewer LLSmartVerify mobile app registrations, allowing counsel, judges, and the general public to authenticate images produced by LLIMAGER using either the mobile app to scan a log's QR code or by visiting the portal directly and uploading a copy of the log;

      • (Soon to be released) Advanced metadata interrogation via temporal analysis:

        • Lag between image completion time and QR code scan of log: The closer to zero value equates to a higher degree of confidence that the image log file's QR code was scanned right after the image was created.
        • Lag between image completion time and when submitted/added to the blockchain: Nearest zero value means a higher degree of assurance that the image metadata made it to the blockchain right after the image was created.
        • Latency between the image completion time and the time the GPS location was recorded: A short window, such as 30 minutes, provides proof that the examiner's location was in fact in very close proximity to the imaged evidence.

e-Forensics Inc.
Email: support@e-forensicsinc.com

Document generated: March 2026