GID – A Big Step For Intelligence Sharing And Collaboration


Collaboration has always been a cornerstone of everything we do at Griffeye. We simply believe that humans are better when working together. That is why the Analyze platform is built to interconnect and reach out to other forensic tools, platforms and databases. We recently took this concept one step further, by releasing our new Griffeye Intelligence Database (or GID).A database might not seem like the most thrilling thing in the world. But GID is much more than the typical data store. The concept of GID is built around the idea of connecting investigators with each other. The issue of silos has long been a well-recognized and major problem within many businesses and organizations. And, in our experience, silos are also one of the main obstacles for law enforcement agencies as they look to share the workload, information and knowledge – to cut backlogs, reduce redundancy and ultimately solve more cases.

Driving offroad

Let’s rewind the tape a bit. It all started at one of our regular Friday sessions in which our developers get the chance to think outside the box and come up with innovate solutions outside the development roadmap. One of Griffeye’s senior developers, Josef Eklann, wanted to look at how we could revamp the existing database DB Manager to improve how investigators could accumulate knowledge, build intelligence and connect with each other. An idea that turned out to be bigger than he initially thought.

It didn’t take long before the entire team was involved, adding more innovative ideas to the concept. We realized that this was something that could potentially solve many of the challenges that our users were experiencing and help to create better collaboration workflows in their daily work. So, we decided to enter it into the roadmap and make it reality.


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.


Unsubscribe any time. We respect your privacy - read our privacy policy.

Easy and seamless

A couple of years later and the GID is now released. The key to success with GID and sharing is how easy and seamless it is. Put simply, it’s a small step for the investigator but a big impact on police work. Investigators no longer have to spend time to search for the right information or on administration and processes to share information with each other. Because that is probably one of the main reasons why so many have been working in silos. Time is crucial for investigative work. But in a time where forensic backlogs keep on growing, along with the exponential growth of the volumes of data that are constantly being seized, it’s critical to turn overwhelming amounts of data into an asset and reduce the redundancy of work between investigators, across units and regions.

It is important because it helps investigators solve more cases quicker, while at the same time reducing exposure and stress. My firm belief is that the sharing of high-quality data is the key to doing so. Because to deal with a six-month (or even a year) backlog, it is simply not possible to spend time on work that could be more effectively handled by technology.

The first step is the biggest

Since that very first session where GID was initiated until today, we have had the very same mission: to connect forensic examiners, analysts and investigators with accumulated intelligence to eliminate backlogs, reduce redundancy and give them the ability to solve more cases.

We have now taken the first, and biggest, step by releasing GID. It is a solid foundation for adding more capacity that enables investigators to share intelligence and collaborate to solve cases. Now, we need to further adapt it to suit different needs and situations. One ambition is, for example, to let the GID automatically de-conflict known/unknown information in real-time between ongoing investigations across a wide network of investigators. This creates great potential in connecting investigators with, for instance, first-generation material as soon as the data is found in the front line. And not at a later stage when the case is closed, and data shared to a central database. Another ambition, and soon available, is the ability to let the GID present case history next to data that has appeared in previous investigations.

All in all, we will continue to build more powerful solutions that help information sharing and collaboration. The vision is that entire countries seamlessly will connect to different standalone GIDs to work together on cases, so that we can say goodbye to silos once and for all.

/ Johann Hofmann, CEO of Griffeye

Leave a Comment

Latest Videos

In this episode of the Forensic Focus podcast, Si and Desi explore how artificial intelligence is being leveraged to uncover crucial evidence in investigations involving child sexual abuse material (CSAM) and examine the importance of exercising caution when implementing these tools. 

They also discuss a recent murder case in which cyber experts played a vital role in securing a conviction, and explore the unique challenges associated with using digital evidence as an alibi.

Show Notes:

A Practitioner Survey Exploring the Value of Forensic Tools, AI, Filtering, & Safer Presentation for Investigating Child Sexual Abuse Material (CSAM) - https://dfrws.org/wp-content/uploads/2019/06/2019_USA_paper-a_practitioner_survey_exploring_the_value_of_forensic_tools_ai_filtering_safer_presentation_for_investigating_child_sexual_abuse_material_csam.pdf

Man charged with NI murder ‘faked live stream to provide alibi’ (The Guardian) - https://www.theguardian.com/uk-news/2023/feb/02/man-charged-with-ni-faked-live-stream-to-provide-alibi

A YouTuber accused of murder faked a 6-hour livestream to produce an alibi (Sportskeeda) - https://www.sportskeeda.com/esports/news-a-youtuber-accused-murder-faked-6-hour-livestream-produce-alibi

European Interdisciplinary Cybersecurity Conference (EICC) 2023 - https://www.forensicfocus.com/event/european-interdisciplinary-cybersecurity-conference-eicc-2023/#more-493234

YouTuber reportedly faked GTA livestream to have an alibi while he committed murder (Dexerto) - https://www.dexerto.com/entertainment/youtuber-reportedly-faked-gta-livestream-to-have-an-alibi-while-he-committed-murder-2052974/

Forensic Europe Expo - https://www.forensicfocus.com/event/forensic-europe-expo/#more-493225

In this episode of the Forensic Focus podcast, Si and Desi explore how artificial intelligence is being leveraged to uncover crucial evidence in investigations involving child sexual abuse material (CSAM) and examine the importance of exercising caution when implementing these tools.

They also discuss a recent murder case in which cyber experts played a vital role in securing a conviction, and explore the unique challenges associated with using digital evidence as an alibi.

Show Notes:

A Practitioner Survey Exploring the Value of Forensic Tools, AI, Filtering, & Safer Presentation for Investigating Child Sexual Abuse Material (CSAM) - https://dfrws.org/wp-content/uploads/2019/06/2019_USA_paper-a_practitioner_survey_exploring_the_value_of_forensic_tools_ai_filtering_safer_presentation_for_investigating_child_sexual_abuse_material_csam.pdf

Man charged with NI murder ‘faked live stream to provide alibi’ (The Guardian) - https://www.theguardian.com/uk-news/2023/feb/02/man-charged-with-ni-faked-live-stream-to-provide-alibi

A YouTuber accused of murder faked a 6-hour livestream to produce an alibi (Sportskeeda) - https://www.sportskeeda.com/esports/news-a-youtuber-accused-murder-faked-6-hour-livestream-produce-alibi

European Interdisciplinary Cybersecurity Conference (EICC) 2023 - https://www.forensicfocus.com/event/european-interdisciplinary-cybersecurity-conference-eicc-2023/#more-493234

YouTuber reportedly faked GTA livestream to have an alibi while he committed murder (Dexerto) - https://www.dexerto.com/entertainment/youtuber-reportedly-faked-gta-livestream-to-have-an-alibi-while-he-committed-murder-2052974/

Forensic Europe Expo - https://www.forensicfocus.com/event/forensic-europe-expo/#more-493225

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_7QiFTiuY7Vw

AI In CSAM Investigations And The Role Of Digital Evidence In Criminal Cases

Forensic Focus 22nd March 2023 12:44 pm

Throughout the past few years, the way employees communicate with each other has changed forever.<br /><br />69% of employees note that the number of business applications they use at work has increased during the pandemic.<br /><br />Desk phones, LAN lines and even VOIP have become technologies of the past workplace environment as employees turn to cloud applications on their computers and phones to collaborate with each other in today’s workplace environment.<br /><br />Whether it’s conversations in Teams, file uploads in Slack chats, or confidential documents stored in Office 365, the amount of data stored and where it is stored, is growing quicker than IT and systems administrators can keep up with.<br /><br />Corporate investigators and eDiscovery professionals need to seamlessly collect relevant data from cloud sources and accelerate the time to investigative and discovery review.<br /><br />With the latest in Cellebrite’s remote collection suite of capabilities, investigators and legal professionals can benefit from secure collection with targeted capabilities for the most used workplace applications.<br /><br />Join Monica Harris, Product Business Manager, as she showcases how investigators can:<br /><br />- Manage multiple cloud collections through a web interface<br />- Cull data prior to collection to save time and money by gaining these valuable insights of the data available<br />- Collect data from the fastest growing cloud collaboration applications like Office365, Google Workspace, Slack and Box<br />- Login to a single source for workplace app collection without logging into every app and pulling data from multiple sources for every employee<br />- Utilize a single unified collection workflow for computer, mobile and workplace cloud applications without the need to purchase multiple tools for different types of collections – a solution unique to Cellebrite’s enterprise solution capabilities

Throughout the past few years, the way employees communicate with each other has changed forever.

69% of employees note that the number of business applications they use at work has increased during the pandemic.

Desk phones, LAN lines and even VOIP have become technologies of the past workplace environment as employees turn to cloud applications on their computers and phones to collaborate with each other in today’s workplace environment.

Whether it’s conversations in Teams, file uploads in Slack chats, or confidential documents stored in Office 365, the amount of data stored and where it is stored, is growing quicker than IT and systems administrators can keep up with.

Corporate investigators and eDiscovery professionals need to seamlessly collect relevant data from cloud sources and accelerate the time to investigative and discovery review.

With the latest in Cellebrite’s remote collection suite of capabilities, investigators and legal professionals can benefit from secure collection with targeted capabilities for the most used workplace applications.

Join Monica Harris, Product Business Manager, as she showcases how investigators can:

- Manage multiple cloud collections through a web interface
- Cull data prior to collection to save time and money by gaining these valuable insights of the data available
- Collect data from the fastest growing cloud collaboration applications like Office365, Google Workspace, Slack and Box
- Login to a single source for workplace app collection without logging into every app and pulling data from multiple sources for every employee
- Utilize a single unified collection workflow for computer, mobile and workplace cloud applications without the need to purchase multiple tools for different types of collections – a solution unique to Cellebrite’s enterprise solution capabilities

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_g6nTjfEMnsA

Tips And Tricks Data Collection For Cloud Workplace Applications

Forensic Focus 20th March 2023 12:00 pm

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.

Latest Articles

Share to...