Blackthorn2

Fast Data Acquisition

Operators have an inherit need to forensically collect data from mobile devices while still in the field and receive an immediate “quicklook” of the data acquired to assist them in making critical tactical decisions. Blackthorn2 was design by operators for operators to allow them to collect relevant data in a fast and efficient manner, while providing real-time feedback to positively impact mission outcomes but still keep consistent with the best practices of handling digital evidence.

 

 

 

Blackthorn2 Data Acquisition

Acquiring data with Blackthorn2 is fast, intuitive and fluid. The acquisition process provides a means to alert users to pre-defined trigger and target lists as data is ingested into the system. Data is acquired in a forensically sound process that creates MD5 and SHA1 hash values and makes the data files read only after acquisition.

Key Acquisition Features Include:

1. Support for Garmin, Magellan, and TomTom Serial and USB GPS devices.
2. Acquire traditional GPS data including routes, waypoints, tracklogs, trackpoints, address books, favorite locations, device settings and other unique characteristics.
3. Acquire paired mobile phone data such as phonebooks, SMS messages, incoming and outgoing calls, and stored documents, pictures, html files and identifying information of paired devices such as MAC address and phone number.
   • Import GPX, KML, Excel, CSV, Tab Delimited, Garmin ADM, Garmin Mapsource and many other device specific files directly into Blackthorn.
4. MD5 & SHA1 hash of acquired data.
5. Read only format of data acquired.
6. Acquire multiple devices into one case.
7. Export data acquired in xml format.
8. Setup alert triggers to notify a user when specific types of predefined data, keywords, and/or geo-locations are acquired from a device.

Designed for operators in the field to quickly and easily acquire data from the leading GPS device manufacturers in the automotive, handheld, maritime and aviation industries, Blackthorn2 requires minimal training and acquires the maximum amount of data possible.