SakshyaYantra ยท Digital forensics

Acquire the phone as evidence

Forensic mobile acquisition: identify the device, run the method that reaches it under a recorded authority, acquire byte-exact, and seal it into the case with the chain of custody and the draft Section 63(4) certificate. The acquisition is handed to the Forensic Suite for examination.

Licensed by a key bound to one machine, sold by the drive or image.

SakshyaYantra Mobile Workbench 7.8.10.76
SakshyaYantra Mobile Workbench screenshot
Who it is forExaminers and forensic laboratories acquiring mobile evidence, from a police unit to an enterprise investigation.
New in 7.8.10.76

What this release adds to SakshyaYantra Mobile Workbench

Each item is in the shipping build of this product; the others in the range that carry it are named on the card.

The frame pack - a still frame travels with its hash, its time on all three clocks, and its source clip frame 22:17:04.12SHA-256 9b1e ... 4a1coverlay / recorder / real timesource E3 ch2 clip 0412examiner - case - audit #the framethe pack that travels with it

Evidence player and frame pack

Clips play from the disk. A frame pack - a few captured frames, each with its presentation time, decoded index, overlay time, case time, channel, source hash and its own SHA-256 - is the only unit that leaves the machine. Never the video.

Three times - the clock burnt into the picture, the recorder's own clock, and real time; the offset is measured, never assumed +0:04:12+0:00:00overlay clockburnt inrecorder clockits own clockreal timemeasured

Three times, never merged

The stream's presentation time, the recorder's overlay text and the case time are separate fields with separate uncertainty, on screen, in the pack and in the report.

Sealed before revealed - the examiner's own reading is written and sealed with a time and an audit number before any model answer is shown; the answer is an observation, and both travel into the finding examiner reads or "unreadable" sealed time + audit no. only then model answer observation, not fact finding both records promotion to a finding of fact needs a typed reviewer decision - never a click

Sealed reading before AI

The examiner's own reading is sealed before any model answer is shown. A model's response is an AI observation - model, version, prompt, input hashes, time, verbatim text - never a finding unless a reviewer promotes it by a typed decision.

A local model pack - signed by Valuepitch, verified on this machine before a byte of the model is read, runs with no network, and its evaluation is printed with every observation signed pack with its manifest verified here unsigned is refused runs offline no network observation error rate printed a case may pin a pack version; updates never change an observation's basis

AI optional: none, local or cloud

Three modes in every build: none, a local model pack with no internet, or cloud behind a per-agency switch that is off by default, with a transfer manifest of every frame digest that left.

The decode ladder - a file goes down rung by rung until something decodes: container demux, full decode, our own vendor demux, raw NAL parse, container repair, concealed decode, I-frame salvage, span map; the rung reached is stated, the unrecovered span is never hidden container demux full decode (worker) vendor demux (ours) raw NAL parse container repair concealed decode - marked I-frame salvage - rung reached span map - what was not recovered, stated exact ... concealed ... salvaged ... stated

Enhancement beside the original

An enhanced frame is shown beside the original, never instead of it, with the chain of operations printed beneath and both exported.

Plate assistance in six stages - track the plate across frames, gate each crop on measured quality, seal the examiner's own reading, then rank the model's candidates with their disagreement, apply the chosen syntax, and record both in the finding SS DD LL MH 12 A8 track quality gate seal reading candidates syntax finding 19 frames floor measured before reveal with dispute recorded both records veiled until sealed "unreadable" is a result of equal standing at the seal

Authenticity, plates, registry, certificate

Authenticity checks with every method ranked, number-plate assistance, registry intake, and the certificate under Section 63(4) of the Bharatiya Sakshya Adhiniyam 2023.

Typical cases

What this product is bought for

If the situation below matches yours, this is the right product. If none of them do, another product in the range is likely to be a closer fit, and the last section on this page says which.

A seized handset is an exhibit and needs a forensic acquisition, not a consumer backup.

The examiner needs to know, before touching the device, whether a method exists for its exact chip.

An acquisition has to be sealed with the chain of custody and a Section 63(4) certificate for it to stand as evidence.

A mobile exhibit has to be acquired under a recorded authority and handed to the examination cleanly.

Key points

How SakshyaYantra Mobile Workbench is built

Authority before the device is touched

The case reference and the operator's stated authority are required before acquisition unlocks - the tool records the attestation, it does not assert lawful authority.

The honest method plan

Which method reaches a locked handset depends on its exact chip, and the plan is run before anything is connected, naming the method that applies or that none does.

Sealed, with a certificate

The acquisition is hashed, manifested and sealed into the case, and a draft Section 63(4) certificate records the device, the method and the authority.

Capabilities

What SakshyaYantra Mobile Workbench does

The method registry

Every public method with its device reach, state and BFU/AFU boundary, the driven open-source tools, and the signed licensed-package seam for what only agreements unlock.

Automatic and manual acquisition

Work down the methods that reach the device until one succeeds, or run a chosen one, each recorded in the audit trail.

Recorded authority

The case id and the operator's authority are captured to the tamper-evident audit trail and travel with the acquisition.

Sealed into the case

The acquisition is sealed with its manifest and the chain of custody, ready for the Forensic Suite to examine.

The Section 63(4) certificate

A draft certificate records the device, method, authority, times and hashes, for the examiner to complete.

Workspaces in this build

These are the workspaces the application contains. Anything not listed is absent from the build; it is not present and locked behind the licence.

  • Phone data recovery
  • Create a phone image
  • Detect every connected device, with a report
  • Forensic examination and reporting
  • casehub
  • stego

The rest of the range

This page lists what the product does. Every capability across the whole range is one table, side by side, generated from the build itself - a job this product does not carry is simply in another column. Hardware cases - drives that do not spin, locked phones, encrypted volumes - are covered in the hardware help guide.

Compare all products

Partner access

Get SakshyaYantra Mobile Workbench

Forensic mobile acquisition: identify the device, run the method that reaches it under a recorded authority, acquire byte-exact, and seal it into the case with the chain of custody and the draft Section 63(4) certificate. The acquisition is handed to the Forensic Suite for examination.

Get SakshyaYantra Mobile Workbench

Supplied to approved RecoverYantra partners. Apply once; your dashboard then carries every product, the licence keys for your machines and a direct line to our engineers.

Become a partnerTell us about your business. Applications are reviewed by a person, and you will hear from us by email.
Apply for access
Already a partnerSign in for the current build, your keys and support.
Partner sign in
Version 7.8.10.76Windows 10 or 11, 64-bitRead-only against your drives

System requirements

  • Windows 10 or 11, 64-bit
  • Administrator rights to read a physical drive. Working from a disk image needs none.
  • A separate destination with room for the recovered data. Results are never written to the drive being read.

Linux

The engine is standard-library Python and runs on Linux from source. A packaged Linux build is available on request.

Specifications

SakshyaYantra Mobile Workbench at a glance

ProductSakshyaYantra Mobile Workbench, version 7.8.10.76
PlatformWindows 10 and 11, 64-bit. Administrator rights are needed to read a physical drive; working from a disk image needs none.
Workspaces included6 of 15 in the range: Phone data recovery, Create a phone image, Detect every connected device, with a report, Forensic examination and reporting, casehub, stego
File types recovered261 formats carried in the signature table, searched together with file system parsing.
Access to the sourceRead-only for the whole session. The application refuses a destination on the drive being read.
LicensingA signed key bound to this machine's code, verified offline. Sold by the source: one use is one drive or image, and the same source is free afterwards. No account and no network access at any point.
Before a keyScan, browse and preview without a key; the key is asked for when files are first saved from a source.
DependenciesNone. A single executable, with no runtime, framework or third-party package to install.
How it is suppliedThrough the partner programme. The build is 809 MB; its SHA-256 is shown beside the download in your partner dashboard.
Related products

Where the rest of the range fits

These products carry workspaces SakshyaYantra Mobile Workbench does not. The list is derived from the catalogue, so it cannot point at a product that lacks the capability too.