BlackLight

blacklight

Mac OS X  •  iOS  •  Windows

BlackLight is a multi-platform forensic analysis tool that allows examiners to quickly and intuitively analyze digital forensic media. BlackLight is capable of analyzing data from Mac OS X computers, iOS devices (iPhone, iPad, iPod Touch) and Windows computers. It is compatible with all leading logical and physical forensic image formats.

Examiners may use BlackLight as a time-saving data triage tool, or as an advanced forensic examination tool depending on the circumstance. To learn more, please view the quick feature videos below.

 

1_Details_SS

Quickly Acquire a Snapshot of the User’s Device

The BlackLight Details view provides a visual device configuration and usage, including:

  • Device type, iOS / OS version, serial number, UDID, and IMEI
  • Artifact summary statistics for documents, emails, movies, calls, voicemail, and more
  • Device user account information and common Internet account information for applications such as Twitter and iCloud
  • Recent usage history, including dialed phone numbers (with associated contact information), last running applications, and most recent web-based location searches.

2_File_Filter_SS

Efficiently Sift Through Large Data Sets

BlackLight’s signature File Filter view includes examiner-defined filter options to quickly pinpoint relevant data within large data sets. Filter criteria include:

  • File name, kind, size, or extension
  • Date created, modified, or accessed
  • Picture metadata attributes, including GPS coordinates and camera (iOS device) type
  • Positive and negative hash set filtering

 
Examiners may apply any number of filters or inverse filters to quickly isolate important data from system files or base application files. BlackLight ships with several pre-set file filters, including those that filter by file type, file attribute, geolocation coordinates, and source device type.

3_Media_SS

Find the Picture and Video Evidence You Need

BlackLight’s Media view has built-in support for all commonly used picture and video file types, and it includes several helpful and examiner-oriented analysis features, such as:

  • Built-in GPS Mapping:
    • All media files containing GPS data will be identified with a placemark badge
    • Examiners can view media geolocation data on a Mercator map (offline) or using Google Maps (online) directly from the built-in GPS view
  • Proprietary Skin Tone Analysis Algorithm:
    • Sort picture and video files by the skin tone percentage contained in the file
  • Video Frame Analysis:
    • BlackLight initially displays video files as 4×4 frame sequences, allowing examiners to quickly triage multiple video files in order to locate potential evidence

4_Social_SS

Uncover a Full Account of Social Media Activit

The brand new Social view provides examiners with comprehensive support for the most popular social media applications. As the proliferation of social media has infiltrated popular culture, understanding the data from these apps has become integral to an overwhelming number of investigations. BlackLight will automatically parse and display data from:

    • Facebook

    • Sort through neatly parsed data for the user’s profile, friends, messages, posts and comments
    • Twitter

    • Uncover the user’s profile info, an archive of their tweets, an archive of the tweets in their news feed, Followers and Following lists, and direct messages
    • LinkedIn

    • Get a quick snapshot of the user’s professional history, including profile info, connections, recent updates, invitations, notifications, and messages
    • Foursquare

    • Track recorded movements through an archive of user check-in data, including GPS coordinate data, timestamps, and venue information

5_Messaging_SS

Recover Every Message from the Most Common Sources

The Messaging view in BlackLight allows examiners to see messaging threads in their native format with support for data from:

  • SMS
  • MMS
  • Skype
  • iMessage
  • iChat
  • Kik
  • TextPlus
  • TextFree

6_Phone_SS

Get a Comprehensive Look at iPhones and iPads

Along with the messaging, media, and social data noted above, BlackLight exhibits its full support for iOS devices in several other signature BlackLight views:

    • Phone

    • Easily understand all relevant iPhone-specific data, including recent calls, Favorites, voicemail, and voice memos
    • Applications

    • View user-specific app files that are stored within application bundles and examine them using BlackLight’s File Content Viewer
    • Contacts

    • Flip through all of the information in the user’s Contacts or Address Book applications, displayed natively for intuitive navigation
    • Locations

    • Scroll through a chronological list of all geolocation data stored on a suspect’s device, sourced from Google Maps, Apple Maps, Foursquare, Kik, Whatsapp, and Location Services

7_Reporting_SS

Customize Your Report

BlackLight is designed to make Reporting incredibly flexible. Examiners may export large data sets parsed in a human-readable format, and export examiner reports in a variety of formats to enable easy information sharing with all interested third parties, both technical and non-technical. With BlackLight’s Report view, you can:

  • Easily tag evidence and include any and all relevant metadata in the examiner report
  • Export your report in your choice of formats, including
    • .pdf
    • .html
    • .docx
    • .txt
  • Export eDiscovery data to a generic Concordance load file that is compatible with all major review platforms
  • Mask (blur) sensitive data contained within examiner reports that may be shared with non-authorized third parties

 
Part No:
AP-BB-BLACKLIGHT-LE – For Law Enforcement
AP-BB-BLACKLIGHT-NLE – For Non Law Enforcement