BlackLight - Mac/iOS Forensic Tool
BlackLight is a multi-platform forensic analysis tool that allows examiners to quickly and intuitively analyze digital forensic media. BlackLight is capable of analyzing data from Mac OS X computers, iOS devices (iPhone, iPad, iPod Touch) and Windows computers. It is compatible with all leading logical and physical forensic image formats.
For more info please visit https://www.blackbagtech.com/
BlackLight 2013 Brochure
Examiners may use BlackLight as a time-saving data triage tool, or as an advanced forensic examination tool depending on the circumstance. To learn more, please view the quick feature videos to the right, or use the drop down menus below which detail the many BlackLight features.
The BlackLight Details view provides a visual device configuration and usage snapshot including:
BlackLight's unique file filter includes preset and user-defined filter options to quickly pinpoint relevant date within large data sets. Filter criteria includes:
BlackLight acquires logical iOS device data and imports a number of third-party and industry-standard forensic image formats:
BlackLight supports a number of iOS and OS X messaging applications and message types including:
BlackLight has built-in support for many picture and video file types, and includes several helpful and unique media processing and analysis features such as:
BlackLight is designed to be incredibly flexible. Examiners may export large data sets parsed in a human-readable format, and export examiner reports in a variety of formats to enable easy information sharing with both technical and non-technical interested third-parties.
BlackLight has extensive positive and negative hashing features and imports common third-party hash sets. BlackLight ships with a proprietary Mac OS X (10.0.0 through 10.8.3) system file hash set. Other file identification features include:
BlackLight has a powerful search feature that quickly isolates evidence contained in large data sets. Search in file names and/or file content.
BlackLight parses and displays Mac Mail application email accounts, several Internet log types, and chat logs.
Operating System Specification