RabbitHole
Developed by CCL’s R&D Centre of Excellence, RabbitHole sets a new standard in forensic data exploration tools. Analysts can drill down into data and effortlessly switch to the optimal view for the data format they are looking at.
Release 2.2
It works by combining an expanding range of data format viewers into a single interface. It introduces the concept of ‘Reparsing’ – letting users take some or all of the data from one view and reparse it into a new, more appropriate format, all within the same tool.
Request a free 30 day trial of our RabbitHole service
Download brochureSupported Data Types
- ABX
- Base64
- Bencode
- Binary Deobfuscation
- Brotli Compression
- Chromium/Electron: IndexedDb
- Chromium/Electron: Local Storage
- Chromium/Electron: Session Storage
- Compound/OLE File
- Deflate Compression Algorithm
- Encode Text to Bytes
- Entropy Calculator
- Epoch Time
- Facebook Serialisation
- Flat Buffer
- GZip Compression
- Hash
- Hex Text
- Hex View
- HTML
- Image View
- Java Serialization Stream
- JSON
- LevelDb
- LZFSE Compression
- MessagePack
- Mozilla LZ4 Compression
- Plist (Binary)
- Plist (Text/XML)
- PM Records
- Protocol Buffer
- Snappy Compression
- SQLite
- String View
- Text Processor
- Text View
- URL
- URL Encoded String
- Windows Registry
- XML
- Zlib Compression
Key benefits
Greater cost-efficiency
The need to invest in only one tool combined with its faster throughput overall delivers both financial savings and operational gains
Higher quality output
RabbitHole enables analysts to understand the results they get better and faster, with the ability to drill down into data seamlessly, and understand data embedded in other data
Better user experience
Developed by analysts for analysts, this is all about giving users more time to work with the data, less time spent wrangling with the tools
Enhanced job velocity
The ability to process and report on data that other tools just don’t process, coupled with avoiding having to export between different tools hugely accelerates the data exploration phase.
In this video Alex Caithness discusses the enhancements to RabbitHole that are now included with Release 2.2
In this video Alex Caithness explains how RabbitHole is able to process artefacts and build reports quickly and easily with the tree parser.
In this video, Principal Analyst Alex Caithness demonstrates the new reparsers for three key storage formats for the Chrome browser: IndexedDB, Local Storage and Session Storage. These three formats are widely used by websites and web apps to store data on a local user’s machine.
In this video, Principal Analyst Alex Caithness demonstrates the two new enhancements to existing SQLite functionality in RabbitHole: a Blob Export function and the ability to perform searches across all the tables in the database without having to write a single line of SQL.
