ADF Triage-G2
ADF Triage-G2 is digital forensic triage software for computer and media exploitation during sensitive site work.
What ADF Triage-G2 is
ADF Triage-G2 is digital forensic triage software for computer and media exploitation during sensitive site work. ADF describes its intended context as military and intelligence operations for counterterrorism, force protection, and other national security needs. The tool is designed for non-technical operators, with a two-step workflow to scan devices, extract information, and analyze intelligence. It can be carried on a small USB key for field reconnaissance. Triage-G2 includes Rosoka entity extraction and multilingual translation; its text analytics processes documents in more than 230 languages to find entities and locations in unstructured material. Evidence sources include computers, mobile devices, USB devices, storage media, documents, emails, text communications, and digital images. Capabilities include mobile forensics, disk imaging, and exports to PDF, VICS, HTML, and CSV. ADF says boot-mode tools do not change disks, while live scans avoid changing file timestamps but leave traces; stealth mode makes those traces harder to locate. Pricing is available on request, with a free 30-day evaluation for qualified organizations.
Good
- Designed for non-technical operators.
- Processes unstructured documents in 230+ languages.
- Supports mobile forensics and disk imaging.
- Exports to PDF, VICS, HTML, and CSV.
- Free 30-day evaluation for qualified organizations.
Watch out
- Pricing is available only on request.
- Live scans leave traces on target computers.
- Windows Dynamic Disks are unsupported for boot scans.
- Evaluation access is limited to qualified organizations.
Who it suits
Triage-G2 suits military and intelligence organizations handling digital evidence in sensitive site operations. It may also suit teams needing multilingual document analysis and field deployment on a portable USB key.
Verdict
Triage-G2 combines field-oriented evidence collection with device, document, and communication analysis. Teams should weigh its live-scan traces and boot-scan limitations alongside its evidence coverage and evaluation terms.
Plans and prices
From ADF Triage-G2's own pricing page, checked 9 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| ADF Triage-G2 | Priced on request | 1-year or 3-year subscription licenses · support, maintenance, and upgrades included during the license term · license stops working when term expires |
The facts
Each one read from ADF Triage-G2's own pages, with the date it was checked.
What it does
- Boot scan integrity
- ADF says its tools are forensically sound in boot mode and do not change disks in that mode.checked 8 Oct 2026
- Computer scan requirements
- For powered-off target computer scans, ADF lists BIOS, UEFI, Secure UEFI, and Mac EFI 2.0 firmware, Intel 64-bit or compatible CPUs, and at least 2 GB RAM.checked 9 Oct 2026
- Field deployment
- The page says Triage-G2 can be deployed in the field on a small, portable USB key.checked 9 Oct 2026
- Image and folder scans
- ADF lists drive image and folder scans for Windows, Mac, Linux, iOS, and Android, with dd and e01 image formats; RAID rebuilding is not supported for image scans.checked 8 Oct 2026
- Intended users
- Triage-G2 is designed for non-technical operators and uses a simple two-step process.checked 9 Oct 2026
- Language coverage
- ADF says Rosoka processes documents in 230+ languages to identify entities and locations in unstructured documents.checked 9 Oct 2026
- License term
- ADF says its software is offered under one-year or three-year subscription licenses, with support, maintenance, and upgrades included during the term.checked 8 Oct 2026
- Live scan limits
- ADF says live scans access target files without modifying timestamps, but running the application leaves traces on the target computer.checked 8 Oct 2026
- Notable limitation
- ADF says Windows Dynamic Disks are unsupported for boot scans; live scans support simple volumes only.checked 9 Oct 2026
- Purpose
- Triage-G2 is digital forensic triage software for scanning, extracting, and analyzing intelligence from computers and digital devices in sensitive-site exploitation.checked 9 Oct 2026
- Stealth mode
- ADF says Triage-G2 live scans can operate in stealth mode, which makes traces left on the target computer more difficult to locate.checked 8 Oct 2026
- Support
- ADF says customer support is free and available by phone, email, or support request; most requests are addressed the same business day.checked 9 Oct 2026
- Supported evidence
- ADF says its forensic capabilities for logical acquisition and analysis include iOS, Android, and ChromeOS platforms.checked 9 Oct 2026
- Supported target systems
- ADF lists powered-off targets with BIOS, UEFI, Secure UEFI, or Mac EFI 2.0 firmware and powered-on Windows Vista/7/8/10 or Server 2008/2012 systems in its technical specifications.checked 8 Oct 2026
- Text analysis
- ADF says Rosoka entity extraction and multilingual translation are standard in Triage-G2 and Triage-G2 PRO.checked 9 Oct 2026
- Training
- ADF says Triage-G2 operators are trained by ADF digital forensic specialists and certified trainers or through NFSTC exploitation training.checked 9 Oct 2026
- Translation and text analysis
- ADF says Rosoka entity extraction and multilingual translation are standard in Triage-G2.checked 8 Oct 2026
- Workflow
- ADF says Triage-G2 is designed for non-technical operators and uses a two-step process to scan, extract, and analyze intelligence from computers and digital devices.checked 8 Oct 2026
The company
- Company
- Advanced Digital Forensic Solutions says it was founded in 2006 and provides digital forensic, intelligent triage, and media exploitation solutions.checked 9 Oct 2026
- Founded
- 2006checked 28 Sep 2026
Money
- Trial
- ADF offers a free 30-day evaluation license for all ADF products and says evaluations receive full support.checked 9 Oct 2026
- Trial eligibility
- The free evaluation license is for qualified organizations, according to ADF’s evaluation page.checked 9 Oct 2026
Alternatives to ADF Triage-G2
- 1
Arkime
Free planOpen sourceWebAPILinuxSelf-hosted7.3Free plan - 2
Plaso
Free planOpen sourceAPILinuxmacOSSelf-hosted7.3Free plan - 3
CAINE
Free planOpen sourceLinuxSelf-hostedWindows7.1Free plan - 4
Paraben E3 Forensic Platform
AndroidiOSLinuxmacOS7.1From $699 a year - 5
OSForensics
Free planAndroidSelf-hostedWindows7.0From $945 a year - 6
NetworkMiner
Free planLinuxmacOSWindows6.9$1,300 one-time