|
|
The patent pending SearchPak technology captures and automates several steps of the data exploitation. Main features include:
- SearchPaks identify specific keywords, phrases, regular expressions, known suspect files (signature based malware/intrusion), illegal or suspect images, suspicious applications (steganography, encryption, anti-forensic) and other file types
- SearchPaks do not contain any original data files and can be easily disseminated and shared amongst users
- Using the SearchPak Wizard tool, SearchPaks can be easily created and configured by users
SearchPaks are widely deployed by users of the ADF Solutions triage tools. Intelligence, Counterintelligence and anti-terrorist SearchPaks are highly classified and not shared for distribution. However many law enforcement SearchPaks are shared and readily available today. Here is a sample list of available SearchPaks:
Software Identification SearchPaks
- Identifying specific anti-forensic software
- Identifying file artifacts of steganography applications. This SearchPak is maintained in Backbone’s Steganography Analysis and Research Center (SARC)
- Identification of specific Peer-to-Peer applications
Child Exploitation SearchPaks
- Identification of unknown/un-hashed images using pixel analysis
- Identification of known images and videos using hash values
- Identification of images and files using keywords
Probation SearchPaks
- Identification of typical dating-related sites
- Identification of common map-related sites
- Identification of common polygraph-related keywords
- Identification of common social networking sites
- Identification of US Sex Offender Registry sites
General Image/Video SearchPaks
- Identification of image files accessed in the last 90 days
- Identification of video files accessed in the last 90 days
Miscellaneous SearchPaks
- SearchPak used to list the user accounts on a computer
- Searches EXIF data to find images that may have been created by a digital camera
Please contact us if you require additional information.
|
|
