Computer Forensics
Computer Forensics HardwareComputer Forensics SoftwareComputer Forensics TrainingComputer Forensics ServicesPurchase Forensic Computer ProductsTechnical SupportCompany Information
SIGN UP ON THE DI MAILING LIST

DIGITAL INTELLIGENCE

17165 W. Glendale Drive
New Berlin, WI 53151
866-DIGINTEL (866-344-4683)
Outside the US: 262-782-3332

Site Contents Copyright © 2009
www.DigitalIntelligence.com

9 FORENSIC SPECIALISTS ONLINE


Forensic Software

Nuix US GALE

Email and data investigation for US Government and Law Enforcement. Nuix US GALE provides the fastest and most complete evidence processing available on a laptop or workstation worldwide. It is the most intuitive, accessible and productive investigative toolset in the industry. Sales, Service, Support and Training for the Nuix US GALE product line is available exclusively through Digital Intelligence.

Licensing

Must Be Quoted

PLEASE CALL
866-344-4683 or 262-782-3332

Description
Nuix US GALE gives investigators the ability to complete more investigations, faster and with greater accuracy than any other tool set in the market. Nuix simplifies, automates and dramatically speeds up the ability to find crucial evidence and graphically demonstrate what really happened. The result is faster output, greater productivity, reduced cost and increased quality control.

An investment in Nuix US GALE brings immediate benefits, starting when electronic evidence is retrieved, including Encase and dd images. A case can be set up in less than 30 seconds and while the data is processing, the investigator is free for other activities. The solution comes complete with Nuix’s revolutionary Universal Indexing™ Engine and Evidence Aware Searching™ abilities.

Nuix US GALE will process every word of text, metadata, all images and binary, as well as ‘slack space’ of Microsoft email formats if selected. Once completed, investigators can find information and evidence extremely quickly – often in seconds – and most importantly, relate that evidence back to other information in the dataset to complete the picture of what really happened.

Nuix’s Universal Indexing™ Engine
Nuix’s indexing process is the most comprehensive and fastest in the world. Average speeds for a suitable quad core computer is 8-14GB per hour. Key features and options include:

  • Indexes most email systems directly, including EDB/STM (Microsoft Exchange), PST, OST (Microsoft Outlook storage files), MSG (Microsoft Outlook single mail files), DBX, MBX (Microsoft Outlook Express), NSF (Lotus Notes), MBOX (standard mailboxes), EML (standard, single email per file, as used in Maildir format), EMLX (Apple Mac OS X Mail.app), BOX (Foxmail), SML (Koomail), Hotmail and Yahoo! Mail HTML (scraped from browser caches).
  • Directly reads hard disks (NTFS, FAT-32 and ENT 2), network file shares and forensic images of both (e.g. Encase and raw dd images).
  • Finds and indexes ‘permanently’ deleted information from Microsoft email formats.
  • Identifies encrypted information and who sent them around the organisation as well as valuable metadata about the files themselves.
  • Extracts ALL metadata information available from every indexed item.
  • Processes ALL information contained within emails, irrespective of how small an image is and how many times it has been zipped or hidden.
  • Equally capable of processing documents and emails in English, Chinese Japanese, Korean, Arabic, Cyrillic and other languages and character sets.
  • Indexes the binary of documents, which enables quick native file review (often Excel and PowerPoint files).
  • Runs Nuix’s skin tone algorithm over all images contained in a dataset to identify pornographic images.
  • Single cases can scale to sizes in excess of 10TB and include any combination of the above formats.
  • Case set up takes thirty seconds.

Nuix’s Evidence Aware Searching™ Functionality
During the Analysis and Review stages, Nuix provides the following tools and capabilities:

  • High level review of content of the dataset, by viewing the numbers of items of each file type in the dataset.
  • Displays exact copies, similar documents* (to three different levels of similarity), and email threads and links them to Nuix’s powerful visualisations.
  • Unique visualization shows clearly how information was sent into, through, and out of an organization, including full email addresses, times and dates of emails.
  • Reviews the social and business network of people, then drills down into specific relationships to better understand them.
  • Search syntax supports searches in wildcard (and multiple wildcard) queries, fuzzy queries, Boolean operators (AND, OR, NOT), phrase queries, proximity queries, field-specific queries (for searching within specific metadata) as well as regular expression searches.
  • Searches are completed over both the text and metadata of items.
  • Powerful filters narrow searches by file type, comments (entered by the reviewer), classifications (entered by the reviewer), communication date, lists of hash numbers, lists of key words, different languages, individual evidence items, and skin tone filtering of images to identify inappropriate images.
  • Reviewers can input their own comments and classifications on each individual item, which then becomes searchable.
  • Each item can be launched, which then (instantly, if binary indexing has been chosen) launches the document/email/image/MPEG etc. in its native viewer.
  • Searches for ‘permanently’ deleted Microsoft emails and their content.
  • Identifies encrypted information and visually demonstrates who sent this information to whom, and when.
  • Creates a complete and detailed history of how the dataset has been searched.
  • Can view data in a hierarchy format which displays the evidence trail.
  • Can load and save searches which are regularly used.

* Patent Pending

Evidence Aware Searching™
Evidence Aware Searching™ - the fastest, most comprehensive and most explanatory set of searching techniques on the planet.

Offering the fastest and most comprehensive set of searching techniques, Nuix’s Evidence Aware SearchingTM provides impactful graphic displays that show clearly who communicated what, to whom, and when. Unlike other forensic/analysis tools, Nuix is simple and intuitive to use, even for the largest and most complex tasks. Nuix‘s investigation toolset simplifies, automates and dramatically speeds the ability to find crucial evidence.

Evidence can be exported into a variety of formats including Native, PDF and CSV. A Report Summary is provided, enabling the investigator to tie all evidence together as well as highlight all the key metadata items and investigator comments and classifications. Graphics can be exported into a number of formats for later display or enhancement.

Exporting and Production
During the exporting phase of evidence, Nuix US GALE does the following:

  • Enables the export of any item, its parent item or its ‘children’ (or all of its parents ‘children’).
  • Exports into Native or PDF, along with a Summary Report of the export which contains chosen metadata information of each item which can be in PDF or CSV.
  • Graphics are exported in either PNG or SVG, which can be loaded into a number of other graphics tools.

Service, Support and Training
Nuix is committed to providing prompt and accurate responses to customers, whether they are looking for an answer to basic product questions, technical issues or wish to brainstorm strategic investigation challenges. Nuix has an outstanding track record in working with our customers to refine and improve our tools in ways which benefit them.

Who Uses Nuix Now?
Law enforcement in Australia, Hong Kong, China, Malaysia, UK, Switzerland, Canada, The Netherlands and the US. Nuix is also used by major consulting firms, large corporations, law firms and regulatory and investigative agencies across the world.