Hawkeye

Hawkeye provides rapid physical acquisition of mobile device storage at a rate at least 5 times faster than current commercial products. It is a complementary on-device agent and setup program that interfaces with various MITRE Periodic Mobile Forensics enterprise components.

Hawkeye uses various mechanisms to speed up the differential comparison of mobile device data. The Hawkeye agent is typically temporarily installed on the mobile device, and the mobile device can operate in “stock” modes during periods of non-Hawkeye use.

To discuss licensing or collaboration activities, please contact MITRE's TTO.