Join Us!

Notifications
Clear all

CP detection  

Page 1 / 3
  RSS
taurean25
(@taurean25)
Member

Hi Everyone,

We have just received a case involving the search of a 500GB hard drive for CP material. The client wants us to find all the CP content on the drive, I wanted to know if anyone can recommend a free solution that offers accurate detection of skin tone, human body parts, and so forth that can help narrow down the search for CP evidence.

I know Xways and Paraben offer these kinds of solutions;however, they are not free. If anyone can recommend a free solution, it will be much appreciated.

Quote
Posted : 18/09/2012 12:28 am
jaclaz
(@jaclaz)
Community Legend

If anyone can recommend a free solution, it will be much appreciated.

There is something, but I wouldn't use it in a real case, let alone a CP one
http//www.forensicfocus.com/Forums/viewtopic/t=6274/

You may want to use a colour based mapper, such as ImageSorter (homepage lost)
http//web.archive.org/web/20100328214542/http//mmk.f4.fhtw-berlin.de/Projekte/ImageSorter
http//download.chip.eu/it/ImageSorter-2.02_1756890.html

This is probably latest available English version (the German one can be downloaded through the wayback machine).

jaclaz

ReplyQuote
Posted : 18/09/2012 1:50 am
Adam10541
(@adam10541)
Senior Member

Just a word of caution, skin tone analysis doesn't always work correctly and can give a false sense of security, and obviously you will still have to view black and white pictures and often cartoon/anime pictures are also not correctly analysed by the skin tone.

However depending on your laws if you only have to view a portion and give that as a representation skin tone can be a help as it gives you the 'most likley' straight away to view.

Also just curious why it needs to be free? Xways is not that expensive and you said "your client" so I'm assuming you work in the corporate sector so you can pass on the costs of software needed to do the job can't you?

ReplyQuote
Posted : 18/09/2012 6:48 am
taurean25
(@taurean25)
Member

I am in the DoD sector as a government contractor, the DoD sector is looking to cut costs in all operation including information systems where I reside.

ReplyQuote
Posted : 18/09/2012 6:53 am
Passmark
(@passmark)
Active Member

OSForensics can also sort by image background or foreground color.
As pointed out above the process isn't perfect, but it can still speed up the investigation, by grouping similar images. We see the main use in quickly finding locations / folders on the disk that might then warrant deeper investigation (i.e. triage)

Here's an example of the output.

There is the free edition that will do up to 200,000 image files, you can use as a short trial.

ReplyQuote
Posted : 18/09/2012 7:15 am
marcyu
(@marcyu)
Active Member

Please be aware that in most U.S. jurisdictions, possessing CP, even for work purposes, is a felony. I used to work in a LE agency which scanned for CP. There is actually free software out there for this very purpose, but is mostly for law enforcement. In most cases, if our software did not work, we just looked at all the images one at a time. What I did was perform a search for photo and video files, then sort them by directory, and look for CP. Again, if you find CP, you must immediately stop viewing the images and contact law enforcement.

ReplyQuote
Posted : 18/09/2012 9:43 am
manuld
(@manuld)
New Member

I think the rules may be slightly different for the Department of Defense. This isn't a commercial case so I am pretty sure he won't have call the local police.

ReplyQuote
Posted : 18/09/2012 4:10 pm
roorings
(@roorings)
New Member

I'm trying to imagine a scenario where the DoD would call up their local police department for help on a CP case… That would be an entertaining phone call.

ReplyQuote
Posted : 18/09/2012 5:56 pm
jaclaz
(@jaclaz)
Community Legend

I'm trying to imagine a scenario where the DoD would call up their local police department for help on a CP case… That would be an entertaining phone call.

Well, still IMHO a DoD contractor does not become automatically LE, and I find "q***r" that a specific task reserved in the US to LE only is given to a contractor. ?

I mean, one thing is contracting "generic examination of a hard disk" (and some CP is found by chance) and another one is "specific examination for CP". 😯

jaclaz

ReplyQuote
Posted : 18/09/2012 6:37 pm
manuld
(@manuld)
New Member

The DoD is a federal agency. Without knowing the full deatis of the OP, I am pretty sure if he is being asked to look for IIOC then it will be legal.

ReplyQuote
Posted : 18/09/2012 8:44 pm
jaclaz
(@jaclaz)
Community Legend

The DoD is a federal agency. Without knowing the full deatis of the OP, I am pretty sure if he is being asked to look for IIOC then it will be legal.

Sure the DoD is a Federal Agency, and most probably they know what they are doing, but the OP posted he was a contractor for the DoD, and I never said that it wasn't legal, I said how I found it "q***r".
What is IIOC? ?

jaclaz

ReplyQuote
Posted : 18/09/2012 9:16 pm
athulin
(@athulin)
Community Legend

What is IIOC? ?

The PC term for CP.

Indecent Images Of Children.

ReplyQuote
Posted : 18/09/2012 9:22 pm
manuld
(@manuld)
New Member

I wouldn't call it a PC term, I would call it what it is. CP is horrible term, it's not Porn, it's rape.

ReplyQuote
Posted : 18/09/2012 9:28 pm
jaclaz
(@jaclaz)
Community Legend

What is IIOC? ?

The PC term for CP.

Indecent Images Of Children.

Boy do I hate when you in the works use acronyms! (

http//www.abbreviationreference.com/definition/iioc

What does PC mean?

http//www.abbreviationreference.com/definition/pc

Yes, I know it means Politically Correct, but how much does it cost to type a few more letters and make the post more easily readable?

But manuld is possibly very right on the actual IIOC vs. CP.

Here, at least AFAIK, Child Pornography is actual photos or "realistic" images/drawings and not such things as defined in the US, including cartoons.

http//en.wikipedia.org/wiki/Legal_status_of_cartoon_pornography_depicting_minors

The good guys under have yet another approach, seemingly
http//www.telegraph.co.uk/news/worldnews/australiaandthepacific/australia/3681599/Judge-rules-characters-in-Simpsons-style-s*x-cartoon-are-child-pornography.html

jaclaz

ReplyQuote
Posted : 19/09/2012 1:20 am
marcyu
(@marcyu)
Active Member

I hate to pull rank here, but seriously, it is a federal crime to possess CP unless you specifically work for law enforcement. We've even arrested defendants' attorneys for it. DoD should contact ICE, the federal LE agency tasked for this duty.

http//www.ice.gov/cyber-crimes/

And I've also been a federal government contractor - there is absolutely no way non-LE should be inspecting computers for CP if there is reasonable suspicion. That's what law enforcement is for.

ReplyQuote
Posted : 19/09/2012 2:04 am
Page 1 / 3
Share: