A Nexus Software Laboratories product
Veritas
Uncover. Analyze. Attribute.
Recover useful evidence from difficult data, and keep a clear record of where each finding came from.
Product screenshots coming soon.
Why Veritas
Evidence does not always arrive as a clean, intact file. It can be fragmented, partly overwritten, embedded inside another source, or recoverable only as useful metadata. Veritas is built around finding that material and keeping enough context to understand what the recovery actually means.
A finding needs more than a familiar file signature. It needs a defensible connection to the source, an assessment appropriate to its format, and a way to distinguish meaningful recovery from noise. Veritas brings those concerns together in an extensible forensic recovery platform.
Precision Artifact Recovery
Recover complete artifacts and meaningful partial findings, with format-specific checks that help distinguish useful evidence from incidental matches.
Verifiable Source Attribution
Trace findings to their source data and the operation that produced them, including the lineage of reconstructed or derived material.
Engineered for Speed
Work through large evidence sources with a performance-focused engine while retaining recovery checks and source attribution.
An Extensible Platform
Add specialized artifact coverage as your evidence needs grow, rather than forcing every format into one generic recovery rule.
Recovers evidence that's fragmented or corrupted
Find useful material even when a complete, intact file is not available. Recovery can preserve meaningful content or metadata without pretending that every damaged artifact is whole.
Different formats need different evidence of a valid recovery. A recognizable header may be informative in one format and little more than noise in another. Veritas applies format-specific qualification so a detection is not automatically promoted into a finding.
When partial material has forensic value, retain it with its source and recovery assessment. When fragments can be reconstructed, keep the relationship between those fragments and the resulting artifact visible in the evidence lineage. A more complete result should add understanding, not erase where it came from.
Artifact Carving
Recovered from fragments. Verified, not guessed.
Built for speed at scale
Large drives and disk images demand more than a fast demonstration on a small sample. Veritas focuses on sustained recovery work without discarding the detail an examiner needs afterward.
The engine's performance work is backed by dedicated benchmarking and corpus validation. The goal is to process substantial sources while preserving the distinction between a quick detection and a qualified artifact, so speed does not replace the checks that give a finding meaning.
Artifact coverage can grow through specialized extensions, including image, document, database, and other evidence families. That lets the recovery platform develop around the formats you need while keeping their individual qualification and interpretation requirements intact.
Processing Speed
Recover at scale. Keep the detail.
Every finding traces back to its source
Keep the path from source to finding available for review, not just the recovered output at the end of the process.
A finding retains the source data it came from and the operation that qualified it. Derived and reconstructed material preserves its mappings and lineage, so you can follow the relationship back through the recovery rather than treating the output as a disconnected file.
Recovery assessments preserve what is known about completeness, structure, and uncertainty for the relevant format. That gives an examiner a better basis for explaining a result and deciding what to investigate next, without mistaking an incomplete recovery for a fully validated original.
Source Attribution
Traceable to the byte. Never a black box.
Works with
- JPEG
- PNG
- GIF
- SQLite
- and more
Common questions about Veritas
Can a partial recovery still be useful?
Some damaged artifacts contain meaningful content or metadata even when full recovery is impossible. Veritas uses format-specific qualification and preserves useful partial findings with their recovery assessment rather than treating every detector match as evidence.
What happens to the source of a reconstructed artifact?
Source mappings and derivation lineage remain part of the evidence model. The reconstructed output does not replace the record of which data and operations produced it.
Can the platform cover additional evidence types?
Artifact families are composed through specialized plugins. New coverage can bring its own format knowledge and recovery checks without requiring every evidence type to use one generic interpretation.
How can I hear when Veritas is available?
Choose Get Veritas updates to join its email list on Kit. Confirm your email address to receive availability news and occasional product updates from Nexus Software Laboratories. You can unsubscribe anytime.