FREE e-Newsletter
Important News - Hot Topics
Get them Now!

DrugTest 5000 - Draeger Safety Diagnostics Inc
In the past, roadside drug screening has been difficult because it involved the...

Exclusive Webinar!

Originally aired: June 17, 2014  ● 2PM EST

View Webinar Archive Here

Integrated Law Enforcement Complements and Completes Law Enforcement Capabilities

Discover how the combination of intelligence analysis, lead generation, agency collaboration, and communications integration can help you uncover issues faster and take action sooner. Learn how innovative IBM law enforcement solutions can extend the capabilities within your organization to deal with new and emerging threats, improve officer safety, reduce criminal activity, and protect the public. 

Join IBM industry expert Stephen Dalzell and members from the MDPD, IT and homeland security departments of the Miami Dade police department to hear more!

Click here to view archive

 

Departments : Computers & Software

InfinaDyne CD/DVD Inspector 2.1

If you’re faced with a mountain of discs from a cyber crime case, this application will find all the bad guy’s secrets.

April 01, 2004  |  by Bob Davis

Nowadays it's easier to commit a crime with a computer than with a gun. That's why today's criminal investigators need both software and hardware tools that will help them analyze the content of seized computers, hard drives, CDs, and DVDs.

Once you take custody of a suspect's computer and any storage discs and external hard drives, the job falls to a computer forensics specialist who must catalog every file on the system. Fortunately for the good guys, computer crooks, despite their facility, with high-tech equipment, programming code, and the nooks and crannies of the Internet, tend to behave like all crooks.

For example, they like to keep trophies. Searches of their computers and their work areas often turn up all kinds of evidence of their "triumphs," including stolen codes, credit card numbers, viruses that they have written, and illegal pornography files.

Many computer crooks keep trophies the way many proud fishing enthusiasts or hunters do; they "mount" them. But instead of taking them to the local taxidermist and having them affixed to a plaque, the computer crook's form of mounting involves burning the "trophy" files to optical media (CDs or DVDs) that he can pop in his computer any time, show his friends, or just enjoy behind closed doors.

There are several reasons why hackers and assorted other computer bad guys like to keep their trophies on CDs and DVDs. For one, optical media are pretty permanent. Cared for properly, a CD or DVD can accurately store data for decades. Also, it's a way of organizing data that you may not want to keep on your hard drive. As one suspect once told me, "I wouldn't want all that 'stuff' clogging up my hard drive and slowing it down."

But there's another reason why bad guys like to store their trophies on optical media. Unless an investigator has the right expertise and the right tools to find hidden, deleted, and renamed files, a CD or DVD can be a safe place to store a trophy.

Fortunately, forensic computer experts are becoming more skilled and their software is getting better at finding these suspicious files. For example, one excellent tool for ferreting out evidence of a cyber criminal's misdeeds that may be stored on optical media is InfinaDyne's new version of CD/DVD Inspector.

Grayslake, Ill.-based InfinaDyne (formerly Arrowkey) has been writing software applications for reading and burning data to optical media discs for the past seven years. On the law enforcement side, the company's clients include the FBI and numerous local agencies nationwide.

Inspector's newest version (2.1) comes with a simple-to-use graphic user interface that allows intensive analysis and extraction of data. When I say "intensive," that's exactly what I mean. Inspector often can read a disc that other software has labeled as "unreadable." My advice is, don't believe it's unreadable until you let Inspector loose.

Inspector is so thorough because it knows what to look for and how to find it. It can gather information from the source material in all major CD/DVD file formatting systems, including ISO-9660, Joliet, UDF, HFS and HFT+, and is compatible with multiple operating systems and discs burned on both Macintosh and Windows systems.

The easy-to-understand displays describe the contents of the disc by folder, application icon, file name, and detail information, with or without MD5 hash (electronic "fingerprint" information for the disk or file). What this means is that when a suspect goes to the trouble of using multiple file systems to attempt to conceal incriminating data, "Inspector" uncovers that fact and reveals all the details. In addition, by right clicking on any object that Inspector finds, you can copy the file contents, see its properties, and display the sector contents just in case someone is trying to pull a fast one on you by renaming the file or hiding data in the slack space.

One of Inspector's best features is its ability to make a ZIP image of an entire CD. This "true copy" captures everything that ever was burned onto the subject disc, including files that are not listed in the directory, damaged files, and deleted files. That's bad news for crooks who think they can hide their nefarious activities merely by erasing the files.

Inspector also offers you some great shortcut features. A warrant to search a cyber criminal's office might yield hundreds of CDs and you may be seeking one specific piece of information, for example, an e-mail address. Inspector can search all files on the disc and all sectors on the disc for that e-mail address.

Also, with Inspector, you can search "inaccessible" discs for scan specification syntax. This is a great feature for any officer investigating a child pornography case because it lets you identify files containing graphic content regardless of their file extension. In other words, your local pervert can't hide his porn collection merely by removing the BMP, GIF, JPG, or TIF extensions because Inspector will tag them as image files regardless of their extension.

Inspector also features built-in tools found under its drop-down menus that run extensive analysis routines, providing vital information for forensic analysis. Unfortunately, InfinaDyne chose to display this information in an undersized dialog box that forces the user to manipulate the horizontal and vertical sliders to read it. But this dialog box has its good points as well. You can use the "Copy Text" button to copy the contents of the dialog box onto the clipboard, which allows you to paste it into any other appropriate application such as a word processor for making your report.

As a cop who actually has some hands-on forensic experience with computers, I give CD/DVD Inspector Version 2.1 a solid thumbs up for both its ease of use and its versatile analysis tools.

A 25-year police veteran, Bob Davis currently runs the San Diego Police Department's computer lab.

Tags: Computer Forensics, Cybercrime

Request more info about this product / service / company


Be the first to comment on this story





POLICE Magazine does not tolerate comments that include profanity, personal attacks or antisocial behavior (such as "spamming" or "trolling"). This and other inappropriate content or material will be removed. We reserve the right to block any user who violates this, including removing all content posted by that user.

Other Recent Stories

Cyber Security: Locking Down the Databases
Computer security is one of the primary concerns for many of the nation's companies and...
Why You Should Double Check for Accuracy
Although law enforcement officers are given considerable leeway for reasonable mistakes,...

Get Your FREE Trial Issue and Win a Gift! Subscribe Today!
Yes! Please rush me my FREE TRIAL ISSUE of POLICE magazine and FREE Officer Survival Guide with tips and tactics to help me safely get out of 10 different situations.

Just fill in the form to the right and click the button to receive your FREE Trial Issue.

If POLICE does not satisfy you, just write "cancel" on the invoice and send it back. You'll pay nothing, and the FREE issue is yours to keep. If you enjoy POLICE, pay only $25 for a full one-year subscription (12 issues in all). Enjoy a savings of nearly 60% off the cover price!

Offer valid in US only. Outside U.S., click here.
It's easy! Just fill in the form below and click the red button to receive your FREE Trial Issue.
First Name:
Last Name:
Rank:
Agency:
Address:
City:
State:
  
Zip Code:
 
Country:
We respect your privacy. Please let us know if the address provided is your home, as your RANK / AGENCY will not be included on the mailing label.
E-mail Address:

Police Magazine