RabbitHole

Developed by CCL’s R&D Centre of Excellence, RabbitHole sets a new standard in forensic data exploration tools. Analysts can drill down into data and effortlessly switch to the optimal view for the data format they are looking at.

RabbitHole
Release 2.2

It works by combining an expanding range of data format viewers into a single interface. It introduces the concept of ‘Reparsing’ – letting users take some or all of the data from one view and reparse it into a new, more appropriate format, all within the same tool.

Request a free 30 day trial of our RabbitHole service

Download brochure

Supported Data Types

  • ABX
  • Base64
  • Bencode
  • Binary Deobfuscation
  • Brotli Compression
  • Chromium/Electron: IndexedDb
  • Chromium/Electron: Local Storage
  • Chromium/Electron: Session Storage
  • Compound/OLE File
  • Deflate Compression Algorithm
  • Encode Text to Bytes
  • Entropy Calculator
  • Epoch Time
  • Facebook Serialisation
  • Flat Buffer
  • GZip Compression
  • Hash
  • Hex Text
  • Hex View
  • HTML
  • Image View
  • Java Serialization Stream
  • JSON
  • LevelDb
  • LZFSE Compression
  • MessagePack
  • Mozilla LZ4 Compression
  • Plist (Binary)
  • Plist (Text/XML)
  • PM Records
  • Protocol Buffer
  • Snappy Compression
  • SQLite
  • String View
  • Text Processor
  • Text View
  • URL
  • URL Encoded String
  • Windows Registry
  • XML
  • Zlib Compression
Key benefits

Greater cost-efficiency

The need to invest in only one tool combined with its faster throughput overall delivers both financial savings and operational gains

Higher quality output

RabbitHole enables analysts to understand the results they get better and faster, with the ability to drill down into data seamlessly, and understand data embedded in other data

Better user experience

Developed by analysts for analysts, this is all about giving users more time to work with the data, less time spent wrangling with the tools

Enhanced job velocity

The ability to process and report on data that other tools just don’t process, coupled with avoiding having to export between different tools hugely accelerates the data exploration phase.

Request your 30 day free trial of RabbitHole here

Contact us

Clients that put their trust in us

A new standard in forensic data exploration tools

Start your 30 day FREE trial and discover more

No obligation, no payment and no credit card required

Questions? Call us on 01789 261200

Increased efficiency, accelerated job throughput, reduced costs.

Green hex image
Go further

Process and report on the data other tools can’t reach, without the need for scripting and coding.

Green hex image
Drill down into data

Working seamlessly to understand data embedded in other data, with no need to export between different software.

Green hex image
Save time

An intelligent, intuitive experience - more time to work with the data, less time spent wrangling with the tools.

Green hex image
Multi-task

Invest in a single tool with no need to validate multiple tools for multiple file formats.

With RabbitHole you can dig through data that may otherwise remain undiscovered. Easily switching to the optimal view for the data format you want.

How does it work?

RabbitHole works by combining an expanding range of data format viewers into a single interface. It introduces the concept of ‘Reparsing’ – letting users take some or all of the data from one view and reparse it into a new, more appropriate format, all within the same tool.

Get in touch to find out more

Resources

Supported Data Types

  • ABX (Android Binary XML)
  • Base64
  • Bencode
  • Binary Deobfuscation
  • Brotli Compression
  • Chromium/Electron: IndexedDb
  • Chromium/Electron: Local Storage
  • Chromium/Electron: Session Storage
  • Compound/OLE File
  • Deflate Compression Algorithm
  • Encode Text to Bytes
  • Entropy Calculator
  • Epoch Time
  • Facebook Serialisation
  • Flat Buffer
  • GZip Compression
  • Hash
  • Hex Text
  • Hex View
  • HTML
  • Image View
  • Java Serialization Stream
  • JSON
  • LevelDb
  • LZFSE Compression
  • MessagePack
  • Mozilla LZ4 Compression
  • Plist (Binary)
  • Plist (Text/XML)
  • PM Records
  • Protocol Buffer
  • Snappy Compression
  • SQLite
  • String View
  • Text Processor
  • Text View
  • URL
  • URL Encoded String
  • Windows Registry
  • XML
  • Zlib Compression
System requirements Windows 10 or higher .NET framework 4.8

Don’t forget the key benefits

Increased efficiency

Reduced cost

Accelerated job throughput

Faster time to better results

Try RabbitHole for free

No credit card, no hassle - sign up takes only 2 minutes

Questions? Call us on 01789 261200
CCL laptop
Please click on "Preferences" to customise your cookie preferences. By default, the essential cookies are always activated. View our Cookie Policy for more information.