Free tools for finding "sensitive numbers"

We deal primarily with PCI sensitive data...CCNs/PANs, as well as track data.

I've recently had to rewrite (with assistance) two EnCase v5 Enscripts for this purpose…the built-in string function IsValidCreditCard() in EnCase v5 is not adequate for use w/ PCI data…it marks JCB CCNs as "invalid". Lance Mueller provided some updates that allowed the EnScripts to run without reliance on internal string functions, which was very beneficial.

I tried to do the same thing w/ EnCase v6, however GSI is not all that keen on folks adding scripts to Case Processor. I have asked GSI for the appropriate updates to the EnScripts (that I ended up developing and adding w/o their help) as well as to the EnCase v6 Case Processor, and as yet, have not received a response.

Cornell Spider doesn't do track data, although you may be able to add that with the appropriate regex. I added regex's for the CCNs not covered by default, and it did a good job of finding the test numbers. However, the big caveat is that you don't get a list of filenames and numbers…just filenames. If you need to do any actual recording of the CCNs or track data for notification purposes, you'll need to do some extra work.

Ccsrch from sourceforge.net is a great little utility, with the only issue being that it doesn't search for CCNs with dashes/spaces. Otherwise, it's very good, searches for track data, and the output is easily managed and parsed.

There's also a tool for this called "Identity Finder". It can locate account numbers, passwords, etc in a device.

http//www.identityfinder.com/

There's also a tool for this called "Identity Finder". It can locate account numbers, passwords, etc in a device.

http//www.identityfinder.com/

Has anyone use this product? It seems reasonably complete and reasonably priced.
I do InfoSec work with some smaller financial companies that might be able to use this but I have no familiarity with it or the company… Seems like it's worth getting a copy for testing.

thanks for the feedback.
Terry