mSIS Features Comparison

mSIS FAMILY MEMBERS Core LE Lite Edit Read
£400 * £400 * £50* £100 * FREE
Features
Brand your mSIS
 
 
 
 
 

 

Your agency logo and name is displayed on login, having the possibility that upon installing mSIS, to insert your own Logo.

 
Tools & Functions
Evidence Search Feature
 
 
 
 
 

 

The Search Feature may be used to search the evidence applied to the case, with various search engines.

 
Expansive Search
 
 
 
 
 

 

The Expansive Search allows for the evidence applied to the case to be further investigated, by conducting searches with different search engines and on various online databases and social media platforms.

 
Grab ID
 
 
 
 
 

 

Extract the user ID of accounts on Facebook, Instagram or Twitter, to enable some of the mSIS tools to access more public information.
Or to use it with third-party apps.

 
Facebook Advanced Search
 
 
 
 
 

 

With the advanced search function, more public information can be extracted regarding a Facebook account.

 
Twitter Advanced Search
 
 
 
 
 

 

Extract data from any public Twitter account, using functions (Convert @name to ID, Download a user’s timeline, Find conversations between two users, etc.) provided by the TweetBeaver site.

 
Page Archive**
 
 
 
 
 

 

A built-in on demand archiving tool, that allows to save a copy of a web page (with the source code, javascript removed), for future reference. The archive is also accessible offline, from both the Audit Log and the exported case bundle. For the Lite version, access is provided also through Evidence Manager. Location of the source and Timestamp is logged in the Audit file.

 
Take screenshot – Complete
 
 
 
 
 

 

Take a screenshot of a web page, visible or not in the browser.
For an accurate complete screenshot, you should scroll down to the bottom of the page before taking the screenshot. Where the height of the screenshot exceeds 1 page height of A4, the screenshot is split into multiple images, as required. Each screenshot image is applied to the report.

 
Take screenshot – Visible
 
 
 
 
 

 

Take a screenshot of the part of a web page, visible in the browser.

 
Take Screenshot – Selection
 
 
 
 
 

 

Take a screenshot of a selected area of a web page.
The selection screenshot can be edited before being applied to the case.

 
Selection Screenshot Edit Tools
 
 
 
 
 

 

The “Selection Screenshot” function allows for the screenshot to be edited, before it is applied to the case.
Once the screenshot area is selected, the following edit tools become available:

  • Move Tool – move the screenshot selection to a different location on the webpage.
  • Resize Tool - resize the are selected screenshot area.
  • Blur Tool – apply a blur effect to selected sections of the screenshot. The blur tool has two options: the round and square shapes.
  • Cover Tool – select an area of the screenshot to cover. The cover tool has two options: the brush or the square selection.
  • Eyedropper – pick a colour from the selected screenshot area, for the cover tool.
  • Undo/Redo – undo/redo any edit to the screenshot that was performed with any of the edit tools.
 
Screenshot Security
 
 
 
 
 

 

Each screenshot is saved with a filename that includes an UNIX timestamp.
Each screenshot is recorded in the Audit Log with the ISO timestamp and the source URL.
A hash value is created for each screenshot.
An Evidence Sheet displays the screenshot with the timestamp, source URL and hash value.
Where an Evidence Report that displays the screenshot, the timestamp and the source URL display adjacent to the image.
Research Doc is a specific feature to mSIS Lite that contains the outline of the research. Each screenshot is recorded in the Audit Log with the ISO timestamp and the source URL.
A complementary security measure consists in screenshots for each hashed document.

 
Screenshot Comments
 
 
 
 
 

 

Each screenshot can be accompanied by a comment that will appear or not in the Research Doc, depending by the researcher that checks or not that specific comment, check box.

 
Image Editor for the evidence applied to the case (screenshots, attachments, etc)
 
 
 
 
 

 

The image editor may be used to make amendments to the image files applied to the case. The image format evidence, applied to the case, may be edited inside mSIS File Explorer with the same tools presented earlier and in the Lite version can be edited also in Evidence Manager.

 
Add Attachments
 
 
 
 
 

 

Add any evidential file type to the case from the web or from a local drive.

 
View EXIF Data
 
 
 
 
 

 

View any available EXIF data from jpeg & tiff (directly with mSIS) files in any website, the mSIS generated report or mSIS file explorer.

 
Whois
 
 
 
 
 

 

A specific search tool, redirects to http://spyonweb.com, https://domainbigdata.com, https://www.whois.com/whois to perform a domain lookup of the active website.

 
Wayback Machine
 
 
 
 
 

 

Provides access to archive.org database through sidebar, right click on webpage and afterwards inside mSIS toolbox 2 → Wayback Machine → Access archive.org database to locate any existing previous versions of the active web page.

 
Apply text/image to report
 
 
 
 
 

 

Apply text and images to the case, directly from a web page, and automatically record the source and timestamp of the evidence being attached and applied to the Audit File.

 
Report Summary
 
 
 
 
 

 

Provides at the beginning of the report a specific editable section accessible through Case Data&Settings where a summary of the evidence presented in the overall report may be inserted.

 
Disclosure Reminder
 
 
 
 
 

 

Provides a function and a service that is extremely important inside any investigation and mainly through the investigations that are going towards a court of law. Any failure of disclosure could mean a failed investigation.

 
Disclosure LE
 
 
 
 
 

 

While exporting the Case Bundle, it provides a list with disclosed and undisclosed material, screenshots and so on, that at the export of the Case Bundle allows categorising the undisclosed material in: Sensitive, Non-sensitive and Undisclosed.

 
Case Setup
Create New Case
 
 
 
 
 

 

The ability to start a new case, before starting a new investigation, to offer the Audit Log the chance to record everything.

 
Import Existing Cases
 
 
 
 
 

 

Load case previously researched with mSIS by uploading the Case Bundle.

 
Case Instructions
 
 
 
 
 

 

Apply "Instructions" when creating a new case. In 'new case' screen, or under General Research, in settings. Also available in Case Data & Settings. User shall have the option to add attachments to an instruction.
Option to show or hide instructions in the generated report.

 
Security Classification
 
 
 
 
 

 

Apply a GSC classification from a drop down list.

 
Deployment Log
 
 
 
 
 

 

Allows the investigator to write the details of the deployment.

 
Decision Log
 
 
 
 
 

 

Allows the researcher to write the decision process, which will not display in the final report, providing traceability through the investigation.

 
Notes Log
 
 
 
 
 

 

Allows the researcher to take notes, which will not display in the final report.

 
mSIS File Explorer
 
 
 
 
 

 

Opens a tab in browser where all attachments are presented and various editing and disclosure options appear available.

 
Evidence Manager
 
 
 
 
 

 

A presentation that is proprietary to mSIS Lite that provides editable fields, providing as means to organise tags for each editable field, bookmarks and provide functionality for all these so that can be filtered and organised. In the same time the Editable Fields can be used through Drag&Drop to provide a hierarchy inside the organising of the case. It allows adding text towards building the investigation.

 
Case Export (Case Bundle)
 
 
 
 
 

 

Case Export materialises through a Case Bundle; that will be different as content and procedure throughout our software family members:

  • mSIS LE – While disclosure is inactive: Attachments main folder – contains an attachments subfolder for each identifier, Instruction, Summary; Audit folder: audit html file, Archives folder; Court Documents folder – not hashed, may be used to upload copies of completed documents, so that all documents relating to the case might reside in the case bundle; Hashes folder – contains a subfolder with hashes from each export (export UNIX timestamp as name) – the hash file in 2 formats html and jpeg (the image can be split in multiple files); REPORT folder – with Evidence Sheet (docx) and Report (PDF); Decision Log html file; DoNotModify.json – the case file. While disclosure is active another Unused Materials folder – contains a file for each unused materials category: non-sensitive, sensitive and undisclosed, in .docx format.
  • mSIS Core contains: Attachments main folder – contains an attachments subfolder for each identifier, Instruction, Audit folder: audit html file, Archives folder; Court Documents folder – not hashed, may be used to upload copies of completed documents, so that all documents relating to the case might reside in the case bundle; Hashes folder – contains a subfolder with hashes from each export (export UNIX timestamp as name) – the hash file in 2 formats html and jpeg (the image can be split in multiple files); REPORT folder – with Evidence Sheet (docx); Decision Log html file; DoNotModify.json – the case file.
  • mSIS Lite contains: Attachments main folder – contains an attachments subfolder for each identifier, Instruction, Summary; Audit folder: audit html file, Archives folder; Court Documents folder – not hashed, may be used to upload copies of completed documents, so that all documents relating to the case might reside in the case bundle; Hashes folder – contains a subfolder with hashes from each export (export UNIX timestamp as name) – the hash file in 2 formats html and jpeg (the image can be split in multiple files); REPORT folder – with Research Doc (docx); Decision Log html file; Notes html file; DoNotModify.json – the case file.
  • mSIS Edit – same as mSIS LE
  • mSIS Read – same as mSIS LE

 

 
Research Processing
Allocate Subjects, Assets, Identifiers
 
 
 
 
 

 

Having the option to choose from Subjects, Assets, Identifiers, any investigator can work on a case involving multiple entities, building it up to a maximum complexity.

 
Apply Identifiers to Assets
 
 
 
 
 

 

Select from 100 grouped identifiers (eg: Name, Date of Birth, Phone numbers) or add custom identifiers.

 
View Identifier Sources
 
 
 
 
 

 

View the source of the identifier.

 
Re-ordering of Assets, Identifiers & sections within a report
 
 
 
 
 

 

Drag and drop. Drag a field above or below another field, then drop to re-order. Re-ordering in the sidebar is also available. Reordering in the generated report so that it complies with a sidebar re-order is to be delivered.

 
Reporting
Brand your Evidence Report
 
 
 
 
 

 

Inside each report generated by mSIS you can insert your own logo that will be displayed on the cover.

 
Research Doc
 
 
 
 
 

 

Research Doc is a specific feature to mSIS Lite that contains the outline of the research.

 
Preview research doc
 
 
 
 
 

 

Preview within the browser for a general view.

 
Evidence Sheet
 
 
 
 
 

 

Preview the evidence sheet within the browser and export as an MS Word doc

 
Evidence Report
 
 
 
 
 

 

A verbose evidential report is generated from the entities and identifiers applied to the case. mSIS provides a template of text that is applied to each identifier. Within the template, variables update relevant to the type of identifier.

 
Evidence Report Template
 
 
 
 
 

 

The report template applies text to each identifier and variables update relevant to the type of identifier.

 
Evidence Report Editing
 
 
 
 
 

 

The Evidence Report can be edited at any time within mSIS.

 
Safe Report Management (Edit report in sections)
 
 
 
 
 

 

Final report shall not be editable ALL at once, but by sections. Each identifier category shall be a section. In Report view, each identifier category section shall have an edit button next to it, that, when actioned, shall make that section editable.
This will make big reports (with lots of images) easier to edit. No lag, no crashes.

 
Evidence Report Autosave
 
 
 
 
 

 

At specific time intervals the report shall be auto-saved. The specific setting can be found in Preferences from Menu.

 
Automatic or Manual Table of Contents in the Evidence Report
 
 
 
 
 

 

Any changes made to the table of contents are available with the Manual mode, afterwards it will be exported in the generated pdf, several other options are available in PDF Settings. Auto numbering still in place.

 
Evidence Report Export
 
 
 
 
 

 

The report is exported as a PDF.

 
Security
Forensically Secure
 
 
 
 
 

 

Evidence gathered with mSIS and saved to a mSIS case Bundle is forensically secure.

 
Hashing
 
 
 
 
 

 

When exporting, create a new file hashes.html. This file will contain all report resources hashes.

 
Image version of the hash file
 
 
 
 
 

 

Creates an image after the hash files coding to provide an additional layer of security.

 
Audit Log
 
 
 
 
 

 

Logs with a timestamp all websites the user visits. Links to any user taken archives. In the same time keeps a track of: Case Data & Settings changes, Case Import/Export and so on, basically everything that happens inside the browser while mSIS is active will be logged in. For research unrelated use of the internet it is recommended to use a different browser in the Incognito Mode.

 
Data Stored Locally
 
 
 
 
 

 

All materials during the investigation is stored on the investigator computer or workstation, Qwarie does not and will not interact with that information.

 
User Restricted Case Access
 
 
 
 
 

 

All mSIS versions provides a login section; each investigator will have to introduce their username and password in order to operate the software during an investigation; when more investigators use the same desktop/workspace access through mSIS will be provided only at their own cases.

 
mSIS OSINT HELP
OSINT Sources
 
 
 
 
 

 

Hundreds of curated links to information websites in multiple jurisdictions

 
OSINT Resources
 
 
 
 
 

 

Links to tools and methodologies that assist the research process

 
OSINT Techniques
 
 
 
 
 

 

The most up-to-date Qwarie training material, built into mSIS

 
Support
User Guides
 
 
 
 
 

 

Provide a detailed guide for each of the mSIS family software members.

 

* Price per licence per year, +VAT

** GDPR Awareness