Searching seized computers is a slow process that
slow process that takes up valuable man hours, delays the
hours, delays the provision of available evidence and leads to backlogs in many digital forensic labs.
Scans based on MD5 hashes of known illegal or prohibited content are ideal for finding evidence quickly and minimising the need for forensic analyst time. Such scans take many hours or even days on devices with high storage capacity or slow external interfaces.
Cyacomb Forensics is working on a new generation of tools that can scan devices for prohibited content in minutes. These tools not only significantly speed up processing, they are also fast enough to be used on site or in the lab for initial screening. This helps prioritise the analysis of devices that are proven to contain prohibited content.
Cyacomb Responder enables the rapid triage of devices for illegal content even without in-depth IT forensics knowledge.
Cyacomb Responder has a simple user interface and pre-configured settings. The tool enables SOCOs, CSEs and CSIs to conduct on-site trieage investigations on devices for known child pornography or terrorism-related material - without displaying the content.
Cyacomb Responder can be pre-configured by experts to ensure the correct settings are used and to control access to certain features.
The tool was developed for "fail safe" processes. This allows the device to be passed to a forensic analysis expert if further detailed checks are required. It can be used directly on a target device via USB bootable version (mounting on read-only target hard drives) or from a forensic laptop (usually via Writeblocker).
ADVANTAGES
Evidence within minutes, even on large or slow devices
Simplified user interface
Detection of offences related to child exploitation or terrorism
Detection of all file types, including fragments and deleted files in unallocated locations
FEATURES
Scanning of devices and hard drives with 2TB/hour and more
Simple red/green results
Pre-configurable by experts
Use on forensic PC or bootable media
EVALUATION OPTIONS
Online Demo
Hardware evaluation kit (including ready-to-use test hard drives and full instructions for testing with your own data)
BUY OPTIONS
Annual licence subscription with USB dongle "Examiner Plus" bundle
Starter Pack with Cyacomb Examiner, Cyacomb Responder and Cyacomb Collector
For more information visit www.cyacomb.com or contact us!