Solve your cases faster with the fitting tools!

banner image

Cyacomb Collector


Searching seized computers is a slow process, consuming valuable man-hours, delaying availability of evidence, and causing backlogs in many digital forensics labs.

Automated scans using MD5 hashes of known illegal content, such as illegal images of children or terrorist handbooks, are a valuable tool for finding evidence quickly and minimising the need for forensic analyst time. Such scans take many hours, or even days on devices with high capacity storage or slow external interfaces.

Cyacomb Forensics is building a new generation of tools that can scan devices in minutes. As well as dramatically accelerating processing, these tools are fast enough to use for triage on-site or in the lab, helping to prioritise analysis of devices that are known to contain contraband.

Cyacomb Collector allows a forensic analyst to build Contraband Filters from original material such as images, videos and document files.

Contraband Filters are used in Cyacomb Examiner and Cyacomb Responder to rapidly identify if a computer or drive contains files matching the original material.

Cyacomb Collector is a desktop tool that creates Contraband Filters by computing information derived from original material.

Contraband Filters are to Cyacomb Forensics what hashsets are to an MD5/SHAx hash search. In addition to search speed, Contraband Filters have a number of advantages.

The Contraband Filter file format is inherently secure — it’s not possible to extract useful information about the contents.

Contraband Filters can be merged using Cyacomb Collector, so investigators can use up-to-date locally sourced data (e.g. from a current case) alongside larger national databases. Unlikely other blacklist formats search speed does not decrease as the Contraband Filter size increases.


  • Build a Contraband Filter from your own data
  • Quickly add newly discovered files
  • Easily use national and local datasets in your investigations


  • Build and merge Contraband Filters
  • Simple user interface
  • Use on Forensics PC


  • Request an online demo
  • Hardware Evaluation Kit (includes ready to test hard drives, and full instructions to test using your own data)


  • Annual license subscription with USB dongle
  • “Examiner Plus” bundle
  • Starter Pack with Cyacomb Examiner, Cyacomb Responder & Cyacomb Collector
For further information please contact us or visit

Contact persons

Our experts are happy to help you.

Johannes Seitz

Hardware & Software Sales
PHONE: +49 (0) 7275 40444-52