|
 |
DeviceLock integrates dtSearch into endpoint device control and security management platform.
DeviceLock endpoint leakage prevention software enables security administrators to centrally control, log and audit end-user access to peripheral devices and local ports from enterprise systems. Native integration with Microsoft Active Directory® results in easy deployment and administration. “After conducting a thorough comparison among a dozen full-text search products available on the market today, we chose dtSearch because of its unbeatable speed and wide range of covered data sources, including files of all popular types stored as SQL database BLOBs. dtSearch also offered an incredible functional set, enabling easy analysis of the silos of unstructured log and shadow data in the DeviceLock central database. The end result lets DeviceLock reliably detect and quickly retrieve any data related to security policy violations.”
More |
|
 |
Odyssey
Digital Forensics™ embeds
dtSearch with Rosette® Linguistics
Platform for multilingual investigative data
support.
Basis Technology's Odyssey Digital Forensics™ enables
data capture from hard disks, while documenting
the integrity and source of the data. From
a captured disk image, the application then analyzes
the file system to extract and recover files,
and extract text from them. Odyssey next uses
the Rosette® Linguistics Platform to preprocess
multilingual text, including Middle Eastern languages
(Arabic, Persian), East Asian languages (Chinese,
Korean, and Japanese) as well as a variety of
European language content. “With
the embedded dtSearch Engine, Odyssey Digital
Forensics Keyword Searching System's smart
search crosses language and file format ‘barriers’.
Analysts need not know all the languages of the
data to perform searches that quickly bring significant
files to the fore.”
More |
|
|
 |
|
IMSG
embeds dtSearch in the Department of Defense
SCOR database.
The SCOR reference covers procedures relating
to the following topics: Anti-Terrorism;
Force Protection; Operations Security (OPSEC);
Physical Security; Foreign Aircraft Overflight;
Information Security; Personnel Security;
Industrial Security; Port Security; Planning,
Programming and Budgeting; Technical Surveillance
Countermeasures (TSCM); Research & Technology
Protection; Information Operations and Information
Assurance. IMSG embedded dtSearch in the
online version of SCOR. "We reviewed
over a dozen search vendors, and dtSearch
came out on top. We particularly like the
speed of the search and the presentation
of the hits list.
More
In
addition to the Web-based version, IMSG
used dtSearch for its portable version
of SCOR. "Out
of the box, dtSearch works. The end result
was a reference CD that field agents
and others could easily search. dtSearch
provides the portability, speed and accessibility
that our defense security customers require.
More |
|
|
 |
SEARCH,
The National Consortium for Justice Information
and Statistics, adds dtSearch to training.
SEARCH is a nonprofit membership organization funded by the U.S.
Department of Justice and created by and for the States. Dedicated
to improving the criminal justice system through the effective application
of information and identification technology, SEARCH is now including
dtSearch in part of its training.
More on SEARCH |
|
 |
General
Dynamics Information Systems uses dtSearch
in Multimedia Analysis and Archive System
(MAAS).
MAAS provides the tactical analyst with the capability
to capture and exploit the wide variety of multimedia
data received in the tactical environment (including
a wide variety of military and other surveillance). “The
dtSearch Engine had an API we could work with.”
More |
|
 |
Chicago Electronic Discovery: “HOWTO: index and search forensic disk images with dtSearch.”
“If you primarily use Linux and The Sleuth Kit/Autopsy to perform forensic investigations, you will already know there are certain limitations to searching in TSK. The following is the approach I use to provide a more thorough search.” “You can then search allocated and carved files and the raw binary file separately. dtSearch uses a ‘filtered binary’ approach to raw files which has proven quite effective in my cases.”
More |
|
 |
SYTEX
forensics teams use dtSearch to help solve
the case.
"Our IT experts use dtSearch
in a variety of ways." For
example, during a recent forensics
case, "drives were imaged,
hashed, and then indexed with dtSearch
... searches for data strings,
file names and other types of informative
searches were exceptionally fast,
to the point of instantaneous.
The ability to search through and
index a variety of document types
- HTML, PDFs, PSTs, Unicode and
many others, a key value of dtSearch,
can be the pivotal point in an
investigation.
|
|
|
|
dtSearch "has
users at the Bureau of Alcohol, Tobacco
and Firearms; California attorney general's
office; Defense and Justice departments;
and NASA." Government
Computer News |
|
|
|
dtSearch
is the software that allows US to
answer YOUR queries with ease.
P.O.W. Network. dtSearch
is a proud sponsor of the P.O.W. Network, www.pownetwork.org |
|
Another
unique approach to file processing
in FTK is the integration of the dtSearch
text-indexing software ... Currently,
FTK is the only integrated forensics
analysis tool to incorporate full text
indexing into the file processing functions.
SC Magazine (from
review of AccessData's The
Forensic Toolkit™) |
|
“Once you’ve collected all of your information — and in today's world, we're probably talking about terabytes … you've got to organize it … This is generally an industrial task … specialized indexing and searching programs can help with this (I'm partial to dtSearch).”
— Techno Security's™ Guide to E-Discovery and Digital Forensics ("Digital Forensics: An Overview") |
|
“That’s an easy one: dtSearch. This incredible tool has more applications than anything that I have worked with in 30+ years as a technical specialist. More magazines and news groups than any product that I am aware of have also recognized it. Several of the authors in this book have mentioned dtSearch as a valuable part of their forensics toolkit as well.”
— Techno Security's™ Guide to E-Discovery and Digital Forensics (FAQ section, by the authors of the book)
|
|
|
|
|
|
ILook
Investigator© Toolsets
include dtSearch.
The ILook Investigator toolsets are computer forensic tools used
to capture and analyze images created from computer systems hard
drives and other external storage media. ILook is provided free
to qualifying agencies throughout the world. Eligible users must
be involved in computer forensics and employed by one of the following:
1) a law enforcement agency whose employees are sworn law enforcement
officers; 2) a government intelligence agency; 3) a military agency
with authority in criminal and or counter intelligence investigations;
4) a government, state or other regulatory agency with a law enforcement
mission.
More on
ILook |
|
|
Trinus
Technologies works with Royal Canadian
Mounted Police on the G8 Summit Security
Joint Intelligence Group (G8 JIG),
using dtSearch.
Attending the G8 Summit Conference were Prime
Minister Chretien (Canada), President Bush
(US), as well as heads of state from the
United Kingdom, Russia, France, Germany,
Italy and Japan. The event, from
an intelligence investigation perspective,
was a resounding success ... We used dtSearch
in a web configuration as the main search
tool for users ... The search functions as
provided by this system proved to be an integral
and vital part of the success of the G8 JIG.
With a minimum of instruction, users were
able to perform sophisticated searches in
a familiar web environment. System performance
... was predictable and excellent.
More |
|
|
Pinpoint Labs addresses “searching for buried treasure” with dtSearch.
Pinpoint Labs specializes in computer forensics software and services. From the company’s “Searching for Buried Treasure” Blog posting: “Mapping the data landscape may not immediately indicate where the textual ‘treasure” is located … A common process mistake is assuming that all files are searchable … there are several common exceptions that will prevent a complete search.” “I’ve been a fan of dtSearch for many years because it handles large file collections of up to several terabytes, has extensive file type support, and great customer service. dtSearch is also integrated into several popular litigation support and computer forensic applications.”
—More (“Searching for Buried Treasure”; Blog Home Page) |
|
|
Evidence Technology puts dtSearch “through its paces.”
Evidence Technology provides an array of digital forensics,
e-discovery and data recovery services. Instead
of providing just computer forensic services,
or forensic video, or forensic audio, or
data recovery, Evidence Technology provides
the full range of services. Evidence Technology has “really
put dtSearch through its paces. It’s
VERY rare that a product impresses me enough
that I feel compelled to write the manufacturer
and offer praise, but dtSearch does. Being
in the business of digital forensics and
electronic discovery, believe me when I say
that I’ve worked with a LOT of applications,
many of them very expensive, but dtSearch
is a shining star in a crowded sky. It’s
truly one of the most solid, reliable, and
powerful applications I’ve used in
years.”
More |
|
|
ENSR
comes in “on time and on budget” using dtSearch for DOD scientific data
project.
Focused on the oil and gas, gas and electric
utilities, transportation, manufacturing
and government sectors, ENSR is an environmental
consulting and engineering firm that provides
a comprehensive range of services logically
aligned with its clients’ asset management
life cycle to help resolve complex environmental
issues. For the US Department of Defense,
ENSR worked on an application that compiles
a set of scientific data, including experimental
test results, scientific papers, and software
model abstracts. After compilation,
the US DOD and ENSR distributed the application
on portable hard-drives, designed to enable
easy access in the field, and to prevent
unauthorized disclosure of sensitive data. “ENSR
using dtSearch delivered a solution that
was on time and on budget. The methodology
that ENSR developed using dtSearch would
be applicable for other technical problem
areas. In fact, the methodology we
developed would be of general use in providing
easy access to any scientific body of knowledge.”
More |
|
|
 |
| eForensics
puts dtSearch through its forensics paces.
Sample eForensics investigations have included:
a software piracy investigation for one
of the world's largest software manufacturers;
an alleged theft of intellectual property
for a major oil field services business;
and a network intrusion investigation for
a major world bank. The eForensics team
offers a special knowledge in anti-forensics
and data-hiding techniques and digital image
analysis. eForensics has extensive multinational
experience, including a special expertise
in Arabic. “We recommend and use
dtSearch as a best-in-class indexing tool
in the forensics arena, and even include
it in our forensics seminars.”
More |
|
|
 |
|
Forensic
analysis applies dtSearch.
The Forensic Toolkit™ from AccessData offers a complete suite
of technologies for forensic examinations of computer systems. dtSearch
was the perfect choice for what we wanted to accomplish ... fast
efficient searching that is easily accessed by any investigator.
More
From Network Computing: Forensic Toolkit “has
significantly more powerful and efficient text-search functionality,
thanks to dtSearch Text Retrieval Engine integration. Integrating
dtSearch eliminates the need to buy a separate text-search tool.” “If
that's not one of your incident-response applications, dtSearch
... is a necessity.”
|
|
 |
Certified forensic technician finds dtSearch “insanely fast.”
”I setup a link for my users to get to the engine and they have been thrilled with the results. dtSearch has saved me from my users AND it is insanely fast!”
More |
|
"dtSearch
provides several versions of its text
mining software for the desktop, Web
sites, remote servers, and for embedding
in other applications ... ideally suited
for rapid indexing by forensic investigators."
—Investigative Data Mining for
Security and Criminal Detection
Author:
Jesús Mena.
Link
to this book at Amazon.com
|
|
Awarded
top rating by TUCOFS -
The Ultimate Collection of Forensic Software,
A Complete Resource for Cyber Law Enforcement
Technologies. |
|
"The
best indexing program I've found is
dtSearch" Effective
Discovery of Email. Read this comprehensive
computer forensics article on emails
at www.civildiscovery.com |
List
of Press Quotes |
|
|
 |
|
SRA uses dtSearch to find the “smoking
gun” in law enforcement.
Law enforcement customers of SRA's OrionMagic® include
the Federal Bureau of Investigations (FBI) and other branches of
the Department of Justice (DOJ), the New York Police Department
(NYPD), and police departments in California, Florida, and Maryland. dtSearch's
many different search options, such as adjustable fuzzy, stemming
for root word derivations, numeric range, proximity, complex boolean
logic, and relevancy-ranked natural language also made dtSearch
the best choice. It was a one-stop shopping solution.
More
From
the Washington Business Journal: Simply
put, the two companies help the good guys catch
the bad guys. The FBI and local law enforcement
agencies ... have used dtSearch and [OrionMagic]
to sift through massive amounts of computer
data to help make the connections that lead
to arrests.” “Dramatic
examples where the product has helped catch
criminals” include “a money laundering
and black market gem operation” and “a
police shooting in California. |
|
|
 |
|
SRA
extends OrionMagic® with
embedded dtSearch to homeland security
and national defense.
Applications in the homeland security and defense arenas include
threat assessment, military intelligence, and embassy security.
Customers include the Defense Intelligence Agency (DIA), National
Reconnaissance Office (NRC), the US Air Force, US Special Operations
Command, Joint Counterintelligence Training Academy, and the Defense
Security Service – Office of Counterintelligence. We found dtSearch provided efficient searching and
optimized index structure. We looked at several search engines
that are out there … But, we found that dtSearch excelled in
performance.
More
From ORIONMagic® U.S. Military “Success Stories”: “Operators in the field collect various types of information in multiple formats and analyze connections. ORIONMagic® … makes it easier to search at a later date. Our customers have told us that it ‘saves countless hours of searching and helps us find the bad guys.’” |
|
|
|
| Computer
forensics firm leaves no byte unturned with
dtSearch.
Computer Forensic Associates specializes
in computer forensics and electronic evidence:
“A wide range of scenarios arise where
a thorough and detailed assessment of the
computer data is required. This can range
from looking for hidden assets, uncovering
frauds, finding missing persons, performing
personnel investigations and preserving
confidential corporate information.”
“I have been using dtSearch for some
time now in the majority of cases I handle.
I have found it to be an invaluable tool.
More
From Processor: “Jeffrey Gross, president and founder of Computer Forensic Associates (www.4nsic.org), says that dtSearch is ‘a powerhouse [that] provides a significant advantage in cases where it is utilized ... dtSearch excels at performing thorough and detailed searches on vast quantities of data ... a class of its own.’”
From EContent Magazine (“The Truth
is in There: Sleuthing for Data with Digital
Forensics”): “Jeffrey Gross,
who founded Computer Forensic Associates
… says one of his ‘secret weapons’ is
dtSearch, an enterprise-class indexing and
search tool.” Mr. Gross "typically
works on complex financial cases and these
involve multiple computers, many individuals,
and many issues, and dtSearch enables him
to see everything that's there in a single
index.” “‘dtSearch is a
phenomenally potent evidentiary extraction
search tool … Using dtSearch with the
forensics software, I can carve out the
unallocated space just like a regular file,
then recover the individual files, whether
they are text files or spreadsheets, deleted
files, word processing files … and put
them all into an index.’” “What’s
more, Gross says, he can use dtSearch across
multiple hard drives, making his search
process vastly more efficient.”
More
|
| |
|
| Forensic
Information Technology courses include dtSearch.
The president of Computer Forensic Associates
is now teaching graduate-level forensics
computer courses. Included in the curricula
is everything from general dtSearch forensic
search applicability, to advanced techniques
for using dtSearch for finding passwords
and encryption keys (please contact Computer
Forensic Associates for details). From the
class notes: dtSearch is not a
forensic tool in the classical definition.
It is more of a data management and searching
utility that lends itself perfectly to computer
forensic examination. Within the universe
of electronic evidence search tools, dtSearch
is about as good and as powerful as it gets
… dtSearch is an industry standard
tool beyond conventional reproach and challenge.
More |
|
|
 |
A
leading security trainer to US law enforcement
and intelligence agencies, SYTEX trains
in dtSearch.
"SYTEX is repeatedly requested
to provide training to the intelligence community, local law enforcement organizations, and professionals in the private sector.
Initial identification of collection
and analysis tools that may enhance and
further investigative efforts is a key
part of training. dtSearch capabilities
make it one of the top tools in analysis
efforts. We have identified dtSearch
as a front line tool for Federal, Local
Law Enforcement, Royal Canadian Mounted
Police, and Intelligence Agencies in
intelligence, forensics and homeland
security endeavors.
More |
|
|
|
"Every
time we go "manual" I am reminded,
once again, what a great product dtSearch
is! I have our entire database indexed
so all we have to do is type in the account
number and INSTANTLY it appears on the
screen along with all dispatch instructions,
zone descriptions and contacts....With
dtSearch, we increased our lookup speed
so dramatically that we can't imagine how
we ever used those index cards for the
task!" Patrick Poire,
www.intercityalarms.com |
|
dtSearch "searches
are blindingly fast. Fishing expeditions
are easier with features such as fuzzy
searches, which can find words even
when they are misspelled, and a built-in
thesaurus that can be used to automatically
include synonyms in a search ... Functioning
equally well against both email folders
and text files, these are very powerful
and useful capabilities for an investigator."
Computer Forensics: Incident Response
Essentials
Authors
of Computer Forensics: Warren G. Kruse
II (Investigations Manager for Corporate
Computer and Network Security at Lucent Technologies,
on the International Executive Committee
of the High Tech Crime Investigative Association,
and co-chair of the National Cybercrime Training
Partnership) and Jay G. Heiser (Certified
Information System Security Professional
and an Information Security Officer at the
headquarters of a major European financial
institution).
Link
to this book at Amazon.com |
|
dtSearch
to the Rescue ... I want to let you
know about an incredible tool ... The
products create indexes that then allow
multi-gigabyte size disk drives to
be searched in less than a second in
most cases. Things like fuzzy searching,
phonic searching, numeric range searching,
synonym searching and wildcard searching
are also possible as well as searching
in network drives, CDs and even the
Internet ... I have never used anything
quite like this product.
SC InfoSec Newsletter
(Jack Wiles) |
|