公开(公告)号：US20230236881A1

公开(公告)日：2023-07-27

申请号：US18159342

申请日：2023-01-25

申请人： Magnet Forensics Inc.

发明人： Jad Saliba ,  Tayfun Uzun ,  Geoffrey MacGillivray ,  Mike Williamson ,  Christopher Vance ,  Cody Bryant

IPC分类号： G06F9/48 ,  G06F9/50 ,  G06F21/64

CPC分类号： G06F9/4881 ,  G06F9/5005 ,  G06F21/64

摘要： Computer systems and methods for managing sensitive data items when performing a computer-implemented digital forensic workflow using on-premises (“on-prem”) and cloud resources are provided. The system includes a control computing node configured to: store the digital forensic workflow in a memory; and allocate forensic data processing tasks corresponding to portions of the digital forensic workflow to processing node computing devices (“processing nodes”) for execution by the processing nodes, the processing nodes communicatively connected to the control computing node via at least one data communication network and including at least one cloud processing node and at least one on-premises (“on-prem”) processing node. The control computing node automatically restricts allocation of a given forensic data processing task to the at least one on-prem processing node when forensic data to be operated on in performance of the given processing task is tagged as sensitive.

公开(公告)号：US20230297544A1

公开(公告)日：2023-09-21

申请号：US18186487

申请日：2023-03-20

申请人： Magnet Forensics Inc.

发明人： Jad John Saliba ,  Matthew Moody ,  Mike Williamson ,  Tarah Melton ,  Harold C. Amick

IPC分类号： G06F16/14

CPC分类号： G06F16/148 ,  G06F16/156

摘要： Systems and methods for predicting significant files for a digital forensic investigation are provided. A method of predicting files of interest during a digital forensic investigation of a target dataset stored on a target device includes tagging a plurality of significant files from a plurality of previous investigations to create at least one set of predictive criteria, storing the at least one set of predictive criteria in a memory of the investigator device, using a first set of predictive criteria to generate a first executable recommendation engine model, storing the recommendation engine model in the memory of an investigator device, automatically scanning the target dataset by a recommendation engine using the first recommendation engine model, and providing an output of any files of interest.