Blackthorn2

Company: Berla Corporation
Product Name: Blackthorn2
Device Types: Garmin, TomTom, Magellan
Aquistion: Logical
Product Website: www.blackthorn2.com

Blackthorn2 is a GPS forensic acquisition, examination and analysis platform designed to give operators in the field, forensics examiners in the lab and intelligence analysts the tool they need when encountering GPS devices. Built as a mission specific application for the law enforcement, military and intelligence communities, Blackthorn2 is the only cross-platform tool that allows users to examine in a forensically sound manner, the content of mainstream GPS devices from the automotive, maritime, aviation, and hand-held sectors.

Blackthorn2’s capabilities include:

Logical acquisitions of all or selected data from Garmin, Magellan, and TomTom Serial and USB GPS devices to include routes, waypoints, tracklogs, trackpoints, address books, favorite locations, paired mobile phone data such as phonebooks, SMS messages, incoming and outgoing calls, and stored documents, pictures, html files and unique device information.
User Alerts which will visually cue the operator when data being acquired matches previously defined data within the target deck, e.g. a specific phone number or activity in an area of interest.
MD5 & SHA1 hash of data acquired
Write Protection of data acquired
Multiple device acquisitions into one case
Examine device file structures, file access and creation times and view files in a HEX or text view.
Web based mapping through Microsoft’s Virtual Earth and embedded mapping via Microsoft’s MapPoint for field operations without connectivity
Live Report creation by tagging data, adding map views, and customizing the report layout on the fly.
Export Reports in HTML, .csv or .pdf format.
Export date acquired in formats accepted by Google Earth, FalconView, ArcGIS, Raptor, and other applications that are “Curser on Target” compliant.
Run analytical reports to determine correlations across cases and/or devices by identifying common activity, places, times or other data.
Simple keyword or data string searches as well as user designed advanced searches using any field and limit data returned by date range, case types, proximity to a specific geographic area.
Conduct full event frequency analysis across cases and/or devices to help identify patterns of activity or variance in routine, and graph the results in a timeline view or plot them on a map.

Blackthorn2’s unique OEA (Operator’s, Examiner’s, Analyst’s) design model allows it to support the key elements of each area and facilitate the transfer of information across disciplines while still having the inherent capability and standards that each user type desires.