±Forensic Focus Partners

±Your Account


Nickname
Password


Forgotten password/username?


Membership:
New Today: 2
New Yesterday: 10
Overall: 27381
Visitors: 93

±Follow Forensic Focus

Join our LinkedIn group

Subscribe to news

Subscribe to forums

Subscribe to blog

Subscribe to tweets

CP detection

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page 1, 2, 3, 4, 5  Next 
  

CP detection

Post Posted: Mon Sep 17, 2012 12:28 pm

Hi Everyone,

We have just received a case involving the search of a 500GB hard drive for CP material. The client wants us to find all the CP content on the drive, I wanted to know if anyone can recommend a free solution that offers accurate detection of skin tone, human body parts, and so forth that can help narrow down the search for CP evidence.


I know Xways and Paraben offer these kinds of solutions;however, they are not free. If anyone can recommend a free solution, it will be much appreciated.  

taurean25
Senior Member
 
 
  

Re: CP detection

Post Posted: Mon Sep 17, 2012 1:50 pm

- taurean25
If anyone can recommend a free solution, it will be much appreciated.

There is something, but I wouldn't use it in a real case, let alone a CP one:
www.forensicfocus.com/...ic/t=6274/


You may want to use a colour based mapper, such as ImageSorter (homepage lost):
web.archive.org/web/20...mageSorter
download.chip.eu/it/Im...56890.html

This is probably latest available English version (the German one can be downloaded through the wayback machine).


jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 

jaclaz
Senior Member
 
 
  

Re: CP detection

Post Posted: Mon Sep 17, 2012 6:48 pm

Just a word of caution, skin tone analysis doesn't always work correctly and can give a false sense of security, and obviously you will still have to view black and white pictures and often cartoon/anime pictures are also not correctly analysed by the skin tone.

However depending on your laws if you only have to view a portion and give that as a representation skin tone can be a help as it gives you the 'most likley' straight away to view.

Also just curious why it needs to be free? Xways is not that expensive and you said "your client" so I'm assuming you work in the corporate sector so you can pass on the costs of software needed to do the job can't you?  

Adam10541
Senior Member
 
 
  

Re: CP detection

Post Posted: Mon Sep 17, 2012 6:53 pm

I am in the DoD sector as a government contractor, the DoD sector is looking to cut costs in all operation including information systems where I reside.  

taurean25
Senior Member
 
 
  

Re: CP detection

Post Posted: Mon Sep 17, 2012 7:15 pm

OSForensics can also sort by image background or foreground color.
As pointed out above the process isn't perfect, but it can still speed up the investigation, by grouping similar images. We see the main use in quickly finding locations / folders on the disk that might then warrant deeper investigation (i.e. triage)

Here's an example of the output.


There is the free edition that will do up to 200,000 image files, you can use as a short trial.  

Passmark
Senior Member
 
 
  

Re: CP detection

Post Posted: Mon Sep 17, 2012 9:43 pm

Please be aware that in most U.S. jurisdictions, possessing CP, even for work purposes, is a felony. I used to work in a LE agency which scanned for CP. There is actually free software out there for this very purpose, but is mostly for law enforcement. In most cases, if our software did not work, we just looked at all the images one at a time. What I did was perform a search for photo and video files, then sort them by directory, and look for CP. Again, if you find CP, you must immediately stop viewing the images and contact law enforcement.
_________________
Marc Yu
Chief Forensics Examiner
ClearForensics.com 

marcyu
Senior Member
 
 
  

Re: CP detection

Post Posted: Tue Sep 18, 2012 4:10 am

I think the rules may be slightly different for the Department of Defense. This isn't a commercial case so I am pretty sure he won't have call the local police.  

manuld
Member
 
 
Reply to topicReply to topic

Share this forum topic to encourage more replies



Page 1 of 5
Go to page 1, 2, 3, 4, 5  Next