Notifications
Clear all

CP detection

32 Posts
12 Users
0 Likes
6,945 Views
(@taurean25)
Posts: 62
Trusted Member
Topic starter
 

Hi Everyone,

We have just received a case involving the search of a 500GB hard drive for CP material. The client wants us to find all the CP content on the drive, I wanted to know if anyone can recommend a free solution that offers accurate detection of skin tone, human body parts, and so forth that can help narrow down the search for CP evidence.

I know Xways and Paraben offer these kinds of solutions;however, they are not free. If anyone can recommend a free solution, it will be much appreciated.

 
Posted : 17/09/2012 11:28 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

If anyone can recommend a free solution, it will be much appreciated.

There is something, but I wouldn't use it in a real case, let alone a CP one
http//www.forensicfocus.com/Forums/viewtopic/t=6274/

You may want to use a colour based mapper, such as ImageSorter (homepage lost)
http//web.archive.org/web/20100328214542/http//mmk.f4.fhtw-berlin.de/Projekte/ImageSorter
http//download.chip.eu/it/ImageSorter-2.02_1756890.html

This is probably latest available English version (the German one can be downloaded through the wayback machine).

jaclaz

 
Posted : 18/09/2012 12:50 am
Adam10541
(@adam10541)
Posts: 550
Honorable Member
 

Just a word of caution, skin tone analysis doesn't always work correctly and can give a false sense of security, and obviously you will still have to view black and white pictures and often cartoon/anime pictures are also not correctly analysed by the skin tone.

However depending on your laws if you only have to view a portion and give that as a representation skin tone can be a help as it gives you the 'most likley' straight away to view.

Also just curious why it needs to be free? Xways is not that expensive and you said "your client" so I'm assuming you work in the corporate sector so you can pass on the costs of software needed to do the job can't you?

 
Posted : 18/09/2012 5:48 am
(@taurean25)
Posts: 62
Trusted Member
Topic starter
 

I am in the DoD sector as a government contractor, the DoD sector is looking to cut costs in all operation including information systems where I reside.

 
Posted : 18/09/2012 5:53 am
Passmark
(@passmark)
Posts: 376
Reputable Member
 

OSForensics can also sort by image background or foreground color.
As pointed out above the process isn't perfect, but it can still speed up the investigation, by grouping similar images. We see the main use in quickly finding locations / folders on the disk that might then warrant deeper investigation (i.e. triage)

Here's an example of the output.

There is the free edition that will do up to 200,000 image files, you can use as a short trial.

 
Posted : 18/09/2012 6:15 am
KungFuAction
(@kungfuaction)
Posts: 109
Estimable Member
 

Please be aware that in most U.S. jurisdictions, possessing CP, even for work purposes, is a felony. I used to work in a LE agency which scanned for CP. There is actually free software out there for this very purpose, but is mostly for law enforcement. In most cases, if our software did not work, we just looked at all the images one at a time. What I did was perform a search for photo and video files, then sort them by directory, and look for CP. Again, if you find CP, you must immediately stop viewing the images and contact law enforcement.

 
Posted : 18/09/2012 8:43 am
manuld
(@manuld)
Posts: 15
Active Member
 

I think the rules may be slightly different for the Department of Defense. This isn't a commercial case so I am pretty sure he won't have call the local police.

 
Posted : 18/09/2012 3:10 pm
(@roorings)
Posts: 4
New Member
 

I'm trying to imagine a scenario where the DoD would call up their local police department for help on a CP case… That would be an entertaining phone call.

 
Posted : 18/09/2012 4:56 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

I'm trying to imagine a scenario where the DoD would call up their local police department for help on a CP case… That would be an entertaining phone call.

Well, still IMHO a DoD contractor does not become automatically LE, and I find "queer" that a specific task reserved in the US to LE only is given to a contractor. ?

I mean, one thing is contracting "generic examination of a hard disk" (and some CP is found by chance) and another one is "specific examination for CP". 😯

jaclaz

 
Posted : 18/09/2012 5:37 pm
manuld
(@manuld)
Posts: 15
Active Member
 

The DoD is a federal agency. Without knowing the full deatis of the OP, I am pretty sure if he is being asked to look for IIOC then it will be legal.

 
Posted : 18/09/2012 7:44 pm
Page 1 / 4
Share: