Blackbag is excited for customers to experience the powerful new features added to BLACKLIGHT 2019 R1. Some of the exciting features in this new update are:

IMAGE CATEGORIZATION

Image categorization reduces review time by revealing images and videos that may contain categories of interest. BlackLight now includes Image Analyzer’s latest technology for machine learning based image analysis. Image Analyzer is a proven solution with years of experience in categorizing images. With Image Analyzer technology built in, users can run image categorization across pictures and videos with no Internet connection.

For this release, BlackLight looks for the following categories:

• Porn
• Weapons
• Drugs
• Extremism
• Gore
• Alcohol
• Swimwear/Underwear

SMART INDEXING

Creating an index of text documents on a device allows an examiner to quickly find if a particular topic is mentioned within the evidence set.  The process of creating an index has historically been time-consuming and resulted in bloated cases sizes. However, new advancements around indexing allow BlackLight to provide users with a quick and efficient index. Once built, investigators can follow where the leads take them. Make fast sequential queries of the index for words without waiting for a traditional search of the drive contents.

For the initial release, BlackLight provides index capabilities only for allocated files on the file system. These are the files most relevant and likely to be useful for prosecution. Data extracted by BlackLight from inside of container files, like internet, email, or archives, as a result of processing are not included but will follow shortly.

An Index Search allows the examiner to search for:

• specific words
• combinations of words in the same documents
• pathnames
• file size
• dates

Finally, BlackLight’s index search uses options like proximity and Boolean logic (AND OR and NOT), to further define which files are most relevant.  Each file with hits is seen in the top table.  Below the files that were found with the query, users view a preview of hits for the highlighted file(s).  Users can highlight multiple files to see hits across files in the preview area.  Finally, highlighting a specific hit will display it the file in the tabs below. For more information about how to search, including a cheat sheet of operators, see the release notes.

EXPORT FILES TO LOGICAL EVIDENCE FILES (.L01)

The EnCase® Logical Evidence File Format (L01) is widely supported by Forensic and eDiscovery tools and preserves file content, metadata, and folder structure. BlackLight now allows you to create Logical Evidence Files directly as an export option. Logical evidence files are created using the [Export] menu. Metadata and folder structure are maintained for files and folders exported in logical evidence files. Select the files and folder to include in the logical evidence file. Access the [Export] by right (contextual) clicking, or from the [Action] menu.