Blackthorn

Blackthorn

GPS Forensics Kit

Blackthorn is the leading GPS forensics tool used by forensic examiners and investigations for acquiring, examining and analyzing data from aviation, maritime, portable automotive, and handheld GPS devices.

Request Quote

Blackthorn is the leading GPS forensics tool used by forensic examiners and investigations for acquiring, examining and analyzing data from aviation, maritime, portable automotive, and hand held GPS devices. Blackthorn supports over 3500 different profiles of devices through logical and physical acquisitions, file imports, and decoding of flash memory images. Users can conduct full examinations of GPS devices and create customized reports by selecting specific data, adding maps, annotations, and comments. The reports can be saved in a variety of common formats. The analysis feature allows user to conduct advanced queries to uncover devices visiting the same locations, devices with activity within a certain distance of a specific location, and devices that have been in the same place at the same time.

Features

  • Supports over 3500 different profiles of devices
  • Acquisition via logical, physical, file import, and flash memory decodes
  • Create custom reports and in html, xml, Word, Excel, or PDF formats
  • Online/Offline mapping with annotation tools
  • Native Hex, Strings, xml, and SQLite data viewers
  • Export data in common formats. csv, txt, xlsx, xml, kml, kmz, or gdb
  • Built-in analytical reports for geo locations, common activity location and time
  • Robust search function. key words, hash value, file type and geo location
  • User based and global watch list capabilities

Data Acquisition

Blackthorn supports Garmin, Magellan, TomTom, Furuno, Raymarine, SIMRad and Lowrance devices, just to name a few. For physical acquisitions, DD and E01 images are supported. Blackthorn can import files such as gdb, adm, gpx, cmap, usr, kml, csv, xls, xlxs, and txt. Users can also import DD and E01 image sets from other acquisition tools.

Ford Add on: Current Blackthorn users can add on the Ford iVe capabilities. This will allow Blackthorn to acquire and decode data from Ford, Lincoln and Mercury vehicles from 2009-2011. Some 2012 and 2013 models are supported.

Examination / Reporting

Blackthorn has native data viewers such as hex, strings, XML, and SQLite. Data can be easily tagged and sent to the report builder. Geo location data can be easily plotted and included in the report from online/offline maps such as Google, Bing, Yahoo, Open Street Maps, ArcGIS Topographical, Aviation Charts, NOAA Maritime Charts or Microsoft’s MapPoint. Users can make annotation on the maps that will be included in the report. Reports can be saved in html, xml, Microsoft Word, Microsoft Excel, or PDF formats. Any of the data acquired with Blackthorn can be exported from the application in csv, txt, xlsx, xml, kml, kmz, or gdb formats.

Analysis / Search

Built-in analytical reports identify activity by geolocation as well as correlations across cases or devices by identifying common locations and times. The search function includes key words, hash value, file type and geo location.

Watch List

Blackthorn has a watch list feature, which provides users with immediate notifications when data being acquired matches a pre-defined trigger. Watch list items can be created based on locations, key words or GREP expressions. Users can maintain multiple watch lists for either specific cases or at a global level.

Software Requirements

  • Windows XP or above
  • Blackthorn will support 64bit systems. Not all GPS device drivers are 64bit compatible.
  • Microsoft .NET Framework 4.0 or above

Hardware Requirements

  • Intel based Processor 1.33ghz or higher
  • 2 USB Ports
  • At least 2 GB RAM
  • At least 4 GB Space
  • 1024x768 minimum screen resolution

Kit Contents

  • Blackthorn Application
  • Cable Pack
  • Carrying Case
  • Hardware Based License Key
  • First year of software upgrades and enhancements

How the license works

The software license is perpetual, meaning that it is always good for the version of software purchased. In order for customers to get access to newer versions of software, we offer a maintenance program. The first year of maintenance is included with the initial purchase. Subsequent years are offered based on a yearly fee and give users access to any version of the software that is released in that year. We typically release a new version every quarter.