Cyan Forensics is building a new generation of tools that can scan devices in minutes. As well as dramatically accelerating processing, these tools are fast enough to use for triage on-site or in the lab, helping to prioritize the analysis of devices that are known to contain contraband.
Automated scans using MD5 hashes of known illegal content, such as illegal images of children or terrorist handbooks, are a valuable tool for finding evidence quickly and minimizing the need for forensic analyst time. Such scans take many hours or even days on devices with high capacity storage or slow external interfaces.
Cyan Examiner is for forensic analysts who want results fast. It replaces slow MD5 scans for known Indecent Images of Children or terrorist-related material with a tool that is 20x faster, delivering results in minutes.
It can be used from your own forensic workstation (usually through a write blocker), or directly on a target device using a USB bootable version (which mounts target drives read-only), or on a running device.
Cyan Collector allows a forensic analyst to build Contraband Filters from original material such as images, videos and document files. Contraband Filters are used in Cyan Examiner and Cyan Responder to rapidly identify if a computer or drive contains files matching the original material..
Cyan Core allows Cyan Forensics’ Contraband Filter building technology to be incorporated into data centers and automated workflows. Cyan Core is designed to build Contraband Filters from national and international sized datasets, and then update those Contraband Filters when new material becomes available.