IPED Digital Forensic Tool

History

IPED (Digital Evidence Processor and Indexer) is an open-source software developed by digital forensic experts from Brazilian Federal Police since 2012. Although it was always open source, only in 2019 its code was officially published.

Features

Hashes

• Supported hashes: md5, sha-1, sha-256, sha-512 and edonkey
• PhotoDNA available for law enforcement (contact iped at pf dot gov)

File System Decoding and Parsing

• Out-of-process file system decoding and file parsing
• Resuming or restarting stopped or aborted processing

Data Carving and Video Thumbnails

• Fast data carving for files and emails
• Video thumbnails generation

Regex Results

• Powerful regex engine with results visualization

Map

• Geospatial analysis with maps and coordinates visualization

Communication Links

• Analysis of communication links (calls, emails, instant messages...)

Face Search

• Face recognition using random forests algorithm

Audio Transcription

• Local and remote audio transcription services integration
• Azure and Google Cloud services support

Timeline Analysis

• Event filtering for timeline analysis
• Browser history for IE, Edge, Firefox, Chrome, and Safari

Grouping (Clustering)

• Powerful file grouping based on ANY metadata

Multicases Support

• Up to 135 million items per case

Scripting

• Extensible with JavaScript and Python scripts
• CPython extensions support

Web API

• Search remote cases by metadata
• Get file metadata, raw content, decoded text, thumbnails, and bookmarks
• Post bookmarks and tags for interesting data

Screenshots

[Insert screenshots]

> Visit IPED Website <