Prosecution

Access Data Group

FTK is a database driven solution that processes and indexes large amounts of data up-front to allow efficient filtering and searching. Users interact with FTK via a web interface which allows them to conduct computer forensic investigations. The product provides file filtering, search functionality and access to remote systems on the network as well as helps law enforcement, corporate security and IT professionals locate, analyze and evaluate the evidentiary value of files, folders and computers

Access Data Group

Quin-C is a digital investigation software solution that provides a customizable UI to allow advanced data vizualisation, processing and analysis.

Child Rescue Coalition

Automating the handling of evidence –including chat logs, data and videos – for live streaming abuse cases. Because mobile applications are often used to share CSAM and groom children, this solution will also help collect data against suspects with a sexual interest in children.

Child Rescue Coalition

Child Rescue Coalition is a partnership of child exploitation investigators, police officers, digital forensic experts. prosecutors, child welfare agencies, and corporate and private philanthropy who work together to apprehend and convict abusers of children, rescue those in harm's way, and importantly, seek to prevent abuse from happening in the first place. At its core is technology that identifies, monitors, and ranks the online criminal behavior of child predators on peer-to-peer file-sharing and chat networks.

Griffeye

Analyze Collaboration Server is a central repository for storing and sharing information. Analyze Collaboration Server Enterprise enables organizations to store and access all the relevant material they have ever collected. The software facilitates image and video processing via a custom user interface, allowing investigators to work with a central store of case data. The Griffeye AI is made up of two core solutions: The CSA classifier, which has been trained on real CSA case data, and the Object classifier, which can detect various objects and details in images.

Hubstream

Hubstream lntelligence is a customizable web application for understanding and taking appropriate action on investigative data. Data from online and off-line sources becomes integrated with a user's overall intelligence capability. Through smart linking, modern visualization and analytic techniques, as well as actionable dashboards, users can more quickly drive investigative leads through mission-critical workflows. The software helps drive operations and triage process national and international case referrals, victim identification workflows, and automated intelligence gathering from open source and proprietary intelligence.

Hubstream

Hubstream Intelligence Fabric is an automation and data sharing service that powers national and international collaboration and distribution of mission-critical data sets. The service uses scalable and secure cloud technologies to allow massive scale collaboration and fast communication of changes to data sets used by forensics investigators. It is used internationally to track hundreds of millions of data points and is used by tens of thousands of users.

Hunch.ly

Hunchly is a web capture tool that automatically collects, documents, and annotates every web page you visit to create a transparent audit trail for online investigations.

IBM i2

IBM i2 Analyst's Notebook is a visual analysis tool that helps turn data into intelligence. The solution provides features such as connected network visualizations, social network analysis, and geospatial or temporal views to help users uncover hidden connections and patterns in data. These insights aid in identifying and disrupting criminal, cyber and fraudulent threats.

IBM i2

i2 iBridge connects to select enterprise databases with search/query capabilities to return analysis-ready data. i2 information Exchange for Analysis Search for Analyst's Notebook connects to/searches multiple sources at once to retrieve analysis-ready data.

Magnet Forensics

Magnet Forensic's AXIOM tool set uses Al, automation, advanced searching techniques, modern data visualization and more to help investigative teams find digital evidence and understand the story it is telling.

Maltego

Maltego is an interactive data mining tool that renders directed graphs for link analysis. The tool is used in online investigations for finding relationships between pieces of information from various sources located on the Internet.

Palantir

Instead of logging in to separate data systems, agents, detectives and investigators can conduct a single search for a suspect, target, or location and return data from all relevant systems. Palantir Gotham featres intuitive, user-friendly interface backed by powerful data integration software providing access to art available information related to an investigation in one place. Data is secured at a granular level (down to individual attributes describing each piece of data), ensuring that users can only see information for which they are authorized. Users can also collaborate on investigations and share information. Palantir Gotham can integrate data in any format, including existing case management systems, evidence management systems, arrest records, warrant data, subpoenaed data, record managements system (RSS) or other crime-reporting data, Computer- Aided Dispatch (CAD) data, federal repositories, gang intelligence, suspicious activity reports, Automated License Plate Reader (ALPR) data, and unstructured dat such as'document repositories and emails. Access restrictions can be applied broadly based on the data source, or granularly, down to individually securing attributes and metadata (e.g., a building's address or the timestamp associated with a photograph) These permissions govern how users access data All interactions, including searching, viking, and editing data, are recorded in a tamper-evident audit log.

Paliscope

Paliscope software allows users to conduct online investigations and quickly and easily collect open source data for review and analysis using third party services to correlate and find more data on the Clearnet and Darknet. Findings can be reported and secured with an audit log. Paliscope also provides an easy-to-use OSINT browser with integrated tools to elicit optimal results

Predpol

PredPol uses a machine-learning algorithm to calculate its predictions on where crimes will occur. Historical event datasets are used to train the algorithm for each new city (ideally 2 to 5 years of data). It then updates the algorithm each day with new events as they are received from the department. This information comes from the agency’s records management system (RMS). PredPol uses ONLY 3 data points – crime type, crime location, and crime date/time – to create its predictions. No personally identifiable information is ever used. No demographic, ethnic or socio-economic information is ever used. This eliminates the possibility for privacy or civil rights violations seen with other intelligence-led policing models.

Project VIC International

By working with local law enforcement, KATALYST will improve forensic and victim identification capabilities, and facilitate collaboration between national law enforcement teams and international partners to ensure the safety of children online.

Stop The Traffik, IBM

STOP THE TRAFFIK and our long-term technology partner, IBM, have created the first ever international data hub to facilitate the sharing of information about human trafficking across all industries and sectors. The Traffik Analysis Hub (TAHub) is a partnership that includes financial institutions, NGOs, law enforcement and government agencies who are all unified by the common goal of sharing data to stop human trafficking. Using advanced cognitive technologies developed by IBM, the TAHub will facilitate the sharing of information quickly and easily and combine multiple data sets in one secure system. IBM has donated a significant grant to make this a reality and will use AI technology to quickly analyse and process volumes of data from a variety of sources; while ensuring its security and integrity.

The National Center for Missing & Exploited Children (NCMEC)

NCMEC’s CyberTipline is the nation’s (USA’s) centralized reporting system for the online exploitation of children. The public and electronic service providers can make reports of suspected online enticement of children for sexual acts, child sexual molestation, child sexual abuse material, child sex tourism, child sex trafficking, unsolicited obscene materials sent to a child, misleading domain names, and misleading words or digital images on the internet. Through funding from Facebook, NCMEC offers the Case Management Tool (CMT) for domestic and international law enforcement who receive and investigate CyberTipline reports.  The CMT allows users to triage, query, organize and refer CyberTipline reports within this web-based interface. NCMEC's Law Enforcement Agency Web Services (LEAWS) allows law enforcement around the world access to CyberTipline report data.  This back-end infrastructure allows report data to be ingested by case management tools to allow quicker access, triage and response. NCMEC's ISP Web Services (ISPWS) allows companies around the world report directly to the CyberTipline. This back-end infrastructure allows for easier and automated reporting by companies around the world taking a stand against child sexual exploitation. While companies based in the US are required by law to report to the CyberTipline, any global company may and is welcome to report to the CyberTipline to better protect children and users on their platforms and services. As part of the CyberTipline response process, NCMEC notifies companies and providers when they are hosting CSAM and no suspect or offender is identified. Our analysts use a specialized interface to send notices daily, calling for these providers to remove the content and it includes a follow-up check to ensure the content has in fact been taken down. In 2021, NCMEC sent over 100,000 notices to companies to remove content from their hosting sites.

Project VIC

Project VIC is a community of investigators, victim identification specialists, application developers, scientists and strategic partners dedicated to developing and levering the newest technologies and victim-centric methods of investigation to improve success rate in rescuing victims of child sexual exploitation and trafficking. Proiect VIC has co-created an ecosystem of shared and standardized technologies specifically chosen to combat crimes involving massive amounts of images and video. Data from these respective technologies is processed using the Project VAC Cloud and redistributed back to the greater community working on crimes against children. The following tools are part of the Project VIC ecosystem: Project VIC Hash Cloud Provided by Project VIC International and Hubstream Inc. hosts over 65 million CSAM and non CSAM hashes- Access encryption Provided by Project VIC. PhotoDNA for Images by Microsoft is made available to law enforcement through a sub-license agreement with Project VIC LLC PhotoDMA for Video by Microsoft is made available to law enforcement through a sub-license agreement with Project VIC LLC Ft Video Fingerprinting by Friend MTB is made available to law enforcement through a sub-license agreement to Project VIC LLC. VICS-Odata Model Licensing is made available to law enforcement through a sub-license agreement with Project VIC LLC international Image Classifies Standard- (IC-3) Machine Learning Modelling is made available through Project VIC International Global Alert System- ViC5 Exif Matching across global platforms to identify similarities in imagery for Victim Identification. License included with ViC5

Belkasoft Evidence Center

Belkasoft Evidence Center is an all-in-one forensic solution for acquiring, locating, extracting, and analyzing digital evidence stored inside computers and mobile devices, RAM and cloud. The tool kit extracts digital evidence from multiple sources by analysing hard drives, drive images, cloud, memory dumps, iOS, Blackberry and Android backups. Graykey, UFED, OFB, Elcomsoft, JTAG md chip-off dumps. Evidence Centre analyses the dat:a source and lays ouc the most forensically important artefacts for an investigator to review.

Child Rescue Coalition

Neula provides an automated application for locating deleted child abuse content on digital devices.The recovery of deleted files is one of the greatest challenges to effectively prosecuting the abusers of children, many of whom eliminate evidence by deleting large quantities of contraband over time. Forensic analysts can sometimes locate and reconstruct a small percentage of the offending files, but this process is extremely painstaking and time-consuming. Neula provides better insight into the true extent of an individual's criminal behavior, specifically the extent to which they pose a present or future risk to children

MICRO SYSTEMATION

XRY is a purpose built software based solution set complete with all the necessary tools for recovering data from mobile devices in a forensically secure manner. The software is delivered through four primary platforms: MSAB Office, MSAB Field, MSAB Kiosk and MSAB Tablet. MSAB Office is the all-purpose forensic system from MSAB, offering the entire XRY product solution in a single package. With MSAB Office you can go deeper into a mobile device to recover vital data with a choice of Logical, Physical, Cloud, PinPoint and Drone recovery tools for all supported devices. The Office kit works on a PC to produce a secure forensic report containing dat extractions from mobile handsets. MSAB Office allows investigators to access alI possible methods to recover data from a mobile device through XAMN Spotlight, or perform deeper analysis which can be done with XAMI\ Horizon. For organisations who wish to perform digital forensics out of the office environment MSAB Field is a field kit that utilises XRY software, XAMN Spotlight for laptops with deeper analysis performed using XAMN Horizon. For a turnkey forensic solution MSAB Kiosk and MSAB Tablet (touch screen version) are all inclusive hardware and software solutions designed for first responders where mobile data recovery is only one part of the job. These products utilise custom built XRY software and are co1nplete hard\vare solutions with all the tools necessary for recovering data from mobile devices in a forensically secure manner.

Oxygen Forensic

Oxygen Forensic Detective offers data extraction from iOS, Android, Windows Phone, BlackBerry devices, feature phones, media, and SIM cards as well as cloud services and drones. The software imports numerous backups and images, including iTunes, Android and BlackBerry backups, JTAG and Chip-off images, and many others. Oxygen Forensics Detective uses several proprietary methods to bypass or disable screen locks on mobile devices, including Samsung, LG, Motorola, and Chinese chipset ones. The program automatically finds passwords to encrypted backups and images by using brute -force, dictionary, Xieve, and other attacks.

Amazon

Rekognition Image is an image recognition service that detects objects, scenes, and faces; extracts text; recognizes celebrities; and identifies inappropriate content in images. It also allows you to search and compare faces. Rekognition Image is based on the same deep learning technology developed by Amazon's computer vision scientists to analyze billions of images daily for Prime Photos. This service only requires users to pay for the number of images, or minutes of video, being analyzed and the face data being stored for facial recognition_ There are no minimum fees or upfront commitmenim. Rekognition Video is a video recognition service that extracts motion-based context from stored or live-stream videos and allows them to be analysed. It detects activities; understands the movement of people in frame: and recognizes objects, celebrities, and inappropriate content in videos stored in Amazon S3 and live video streams from Acuity. Rekognition Video also detects persons and tracks them through the video even when their faces are not visible, or as the whole person might go in and out of the scene_ For example r this could be used in an application that sends a real time notification when someone delivers a package to your door. Rekognition Video allows you also to index metadata, like objects, activities, scene, celebrities, and faces to simply video search. With Amazon Rekognition, you only pay for the number of images, or minutes of video, you analyze and the face data you store for facial recognition. There are no minimum fees or upfront commitments.

CameraForensics

CameraForensics is an online portal allowing users to search for other images on the internet taken with a particular camera to support victim identification investigations. This tool also supports searching geographically for similar and identical images and for various metadata elements. All with the intent of helping investigators link covert and overt (public) personas on the internet. The tool is available via an online user interface and also via a number of products such as Griffeye Analyze, or as a fully integrated solution for agency or country-level databases (via API).

Clearview AI

Clearview AI acts as a search engine of publicly available images – now more than ten billion -- to support investigative and identification processes by providing for highly accurate facial recognition across all demographic groups. Similar to other search engines, which pull and compile publicly available data from across the Internet into an easily searchable universe, Clearview AI compiles only publicly available images from across the Internet into a proprietary image database to be used in combination with Clearview AI's facial recognition technology. When a Clearview AI user uploads an image, Clearview AI’s proprietary technology processes the image and returns links to publicly available images that contain faces similar to the person pictured in the uploaded image.

Luxan

Luxand's technology detects facial features quickly and reliably. The SOK processes an image, detect-s human faces within it, and returns the coordinates of 70 facial feature points including eyes, eye contours, eyebrows, Iip contours, nose tip, and so on.

BlueBear

LACE enables investigators to extract more visual data and efficiently categorize vast amounts of image and video data from confiscated devices using zero false positive visual matching, dramatically reducing (typical 90% case reduction) the time and resources required to bring a case to court. LACE is compatible with international standards for sharing metadata and hash signatures like ICSE, ProjectVic md UK-CAID. LACE Standalone Carver is software used for carving pictures and videos from any digital forensically sound manner. The LACE FORENSIC CARVER recognizes over 180 file types covering image, video, text documents, archive, and database files. Using this light tool, forensic experts will be able to extract evidence and import it using the JSON standard in to all the various tools they choose to use to analyse and review the evidence.

Griffeye

Analyze DI allows users to import, process and review complex information as well as pre-categorise known data and correlate metadata with open sources on the internet.

Interpol

Our International Child Sexual Exploitation (ICSE) image and video database is an intelligence and investigative tool, which allows specialized investigators to share data on cases of child sexual abuse. Using image and video comparison software, investigators are instantly able to make connections between victims, abusers and places. The database avoids duplication of effort and saves precious time by letting investigators know whether a series of images has already been discovered or identified in another country, or whether it has similar features to other images. It also allows specialized investigators from more than 64 countries to exchange information and share data with their colleagues across the world. By analysing the digital, visual and audio content of photographs and videos, victim identification experts can retrieve clues, identify any overlap in cases and combine their efforts to locate victims of child sexual abuse.

Interpol, Inspectoratul General AL Politiei, ZiuZ Visual Intelligence, NCIS Norway

Project CPORT is funded by the European Union. It is a 2-year project that started in Jan 2023. The CPORT portal allows law enforcement agencies to access ICCAM – a database used by national hotlines to process and exchange reports of child sexual abuse material (CSAM) submitted by the public worldwide. The ICCAM platform is hosted by INTERPOL and is an important channel into INTERPOL’s international child sexual exploitation database and list of known domains disseminating severe abuse material (IWOL).

Qumodo

Qumodo Discover is a search engine for evidence. This technology uses AI to intelligently find connections within digital data at a web scale where users can query the system with an image, and it will find other images containing the same places, people, faces and objects. It has been tested with more than 100 million images and validated in a victim ID environment, with child sexual exploitation and abuse (CSEA). content

Qumodo

Qumodo Classify is a software product which dramatically speeds up image categorization for content moderation for law enforcement purposes white reducing the psychological impact on the users, saving both time and money. This tool has been specialty designed around the latest AI technology, as well as 21 core psychology principals to form an effective Human/ AI team. As well as reducing the psychological impact on the user, the tool is designad to prevent human bias from influencing the system and creates the ability for the software to learn new abilities over time, further reducing the time needed to manually classify large amounts of data. When paired with the Vigil AI Classifier (vigil.ai) it becomes a powerful tool in the fight against child sexual exploitation and abuse (CSEA) content.

Semantics 21

S21 Laseri-v is a specialist tool for the mass categorization and analysis of child sexual abuse (CSA) videos. LASERi-v (Videos) contains proprietary workflows and algorithms to perform victim identification and investigation. The application is fully customisable, Project VIC premier certified and used by Police forces across the world for the investigation of child sexual abuse and other major crime types. (S2i LASERi-v (Videos) is available as part of the S2i LASERi suite).

Semantics 21

S21 Laseri-t is a specialist tool for onsite (live box) and bootable (dead box) triage of laptops and computers able to detect and analyse imagery and videos. LASERi-t (Triage) contains prophet workflows and algorithms for intelligence driven search capabilities, compatibility with a wide range of intelligence sources , customisable reporting and both simple and advanced user interface modes for all tiers of users. The application is fully customisable, Project VIC premier certified and used by Police forces across the world for the investigation of child sexual abuse and other major crime types. (S21 LASERi-t Triage) is available as part of the S21 LASERi suite).

Semantics 21

The S2i Laseri Suite is a specialist tool for the mass categorization and analysis of child sexual abuse imagery (CSAI) and animation. LASERi-p Pictures) contains proprietary workflows and algorithms to perform victim identification and quality investigations. The application is fully customisable, Project VIC premier certified and used by police forces across the world for the investigation of child sexual abuse and other major crime types. (S21 LASERi-p (Pictures) is available as part of the S21 LASERi suite).

Videntifier Technologies

Large-scale video identification, which allows searching databases of videos. Videntifier TM Forensic, radically improves the forensic video identification process, by providing law enforcement agencies with a robust, fast and easy-to-use video identification system. Using this ser-vice, a single mouse-click is sufficient to automatically scan an entire storage device and classify all videos.

ZiuZ Forensic, Web-IQ, Timelex, DFKI, INHOPE

The AviaTor project is funded by the European Union and is currently in its final phase. The project started in 2019 and will end in 2024. The project aimed to build a prioritisation tool / database for law enforcement processing NCMEC reports (also known as industry reports or Cyber tipline referrals). The AviaTor database provides law enforcement with the tooling to prioritise these reports. AviaTor stands for Augmented Visual Intelligence and Targeted Online Research – meaning that the AviaTor database has the functionality to use visual intelligence as well as OSINT and hash matching to de-duplicate and prioritise reports. AviaTor is currently used by 19 national law enforcement agencies.

Europol

The Europol Platform for Experts (EPE) is a secure, collaborative web platform for specialists in a variety of law enforcement areas.

Interpol

INTERPOL will bring the most advanced technology to investigators of online CSEA through its new DevOps Group Project. The initiative will facilitate research and development by an expert group of investigators, non-governmental organisations, academia, and information technology companies, and extend solutions to specialised officers worldwide via INTERPOL’s secure channels. Headquartered in France, this project has a global reach.

The National Center for Missing & Exploited Children (NCMEC)

NCMEC offer the Law Enforcement Services Portal (LESP) which serves as a resource and access to several resources of NCMEC directly from the field. One feature is the Hash Query section, in which law enforcement officers in the field may query hash values from active investigations against the NCMEC system to learn if NCMEC knows the child depicted to be identified, and/or whether that hash value has been seen at NCMEC before. CRIS is the internal image and video file catalog used by NCMEC's Child Victim Identification Program. This system allows analysts to review and tag files in bulk in support of prosecution efforts, notating which files contain children identified through previous law enforcement investigations.  In addition, this tool assists the analysts in linking files and cases in support of victim identification efforts.

UK Home Office

CAID is two core databases; one is an image database to support analysing digital images and videos to support investigations. The second is a hash database that provides law enforcement with categorised image and video hashes to support CAID User Orgs when forensically examining evidence on seized devices.