RabbitHole
Developed by CCL’s R&D Centre of Excellence, RabbitHole sets a new standard in forensic data exploration tools. Analysts can drill down into data and effortlessly switch to the optimal view for the data format they are looking at.

It works by combining an expanding range of data format viewers into a single interface. It introduces the concept of ‘Reparsing’ – letting users take some or all of the data from one view and reparse it into a new, more appropriate format, all within the same tool.

Download brochure

Supported Data Types

  • Base64
  • Binary Deobfuscation
  • Command Line Utility (Experimental)
  • Compound/OLE File
  • Deflate Compression Algorithm
  • Encode Text to Bytes
  • Entropy Calculator
  • Epoch Time
  • Facebook Serialisation
  • Flat Buffer
  • GZip Compression
  • Hash
  • Hex Text
  • Hex View
  • HTML
  • Image View
  • Java Serialization Stream
  • JSON
  • LevelDb
  • Plist (Binary)
  • Plist (Text/XML)
  • PM Records
  • Protocol Buffer
  • Snappy Compression
  • SQLite
  • String View
  • Text Processor
  • Text View
  • URL
  • URL Encoded String
  • Windows Registry
  • XML

Key benefits

Greater cost-efficiency

The need to invest in only one tool combined with its faster throughput overall delivers both financial savings and operational gains

Higher quality output

RabbitHole enables analysts to understand the results they get better and faster, with the ability to drill down into data seamlessly, and understand data embedded in other data

Better user experience

Developed by analysts for analysts, this is all about giving users more time to work with the data, less time spent wrangling with the tools

Enhanced job velocity

The ability to process and report on data that other tools just don’t process, coupled with avoiding having to export between different tools hugely accelerates the data exploration phase.

To learn more please get in touch

Contact us

Clients that put their trust in us