Cyacomb launches terrorist material detection tool

Cyacomb has launched a counter-terrorism tool for law enforcement to identify known terrorist-authored material on digital devices. The system was developed with Human Cognition.

The Edinburgh-based digital forensics company said the technology is designed to help investigators examine suspect devices more quickly by matching files against a large archive of terrorist material. The aim is to identify known content without requiring officers to manually review large volumes of unrelated data.

The launch comes as police and security agencies face growing challenges from online radicalisation. Social media, messaging services, online communities and gaming platforms have widened access to extremist propaganda and made it easier for suspects to communicate without face-to-face contact.

The new function draws on Human Cognition's Terrorist Authored Material Contraband Filter. The dataset behind it has been built from more than 3.3 million files collected from terrorist online ecosystems over the past three decades, including more than one million files identified as terrorist-authored material.

According to the companies, the archive includes both historical and more recent material and has been human-verified as content produced by recognised terrorist groups. Devices are checked against that dataset using secure matching technology to show whether known material is present while avoiding exposure to unrelated personal information.

Online challenge

Law enforcement agencies have long relied on digital evidence in investigations, but the scale of modern device storage has increased the burden on investigators. Phones, laptops and other devices can contain thousands of files, making it difficult to establish quickly whether a suspect has accessed or retained material linked to extremist groups.

Cyacomb said the tool is intended for cases involving individuals of concern, including those where officers fear a person may be consuming extremist content or moving towards more serious activity. It argued that earlier identification of known material could help investigators assess risk faster.

"Technology has completely changed the environment in which radicalisation can take place. Traditionally, becoming involved with an extremist organisation would require physical contact, but today an individual can access huge volumes of extremist material without leaving their bedroom. This makes the job of counter-terrorism authorities increasingly difficult. Someone can consume extremist propaganda, communicate with terrorists and progress towards violence behind closed doors. Identifying these warning signs as early as possible is essential," said Chris Johnson, Chief Executive Officer, Cyacomb.

Data partnership

Human Cognition worked with Cyacomb on the system and provided the specialist archive used to identify terrorist-authored material. Its dataset has been assembled through more than a decade of collecting near-real-time data from terrorist networks, with inclusion limited to material produced by terrorist groups.

That distinction matters because investigators and courts often need to separate original propaganda or operational material from journalistic, academic or unrelated content. By narrowing the search to known terrorist-authored files, the tool is intended to reduce unnecessary examination of other material stored on a device.

"The speed, agility and resilience of the terrorist networks that share content online, and the mobility of potential terrorists in the physical world, requires tools that enable law enforcement to rapidly identify content on digital devices," said Dr Ali Fisher, Explorer of Extreme Realms and Co-Founder, Human Cognition.

The companies said the matching process works regardless of the nature or language of the content. That could be relevant in cross-border investigations or cases involving international propaganda, where investigators might otherwise face delays caused by translation needs or limited specialist expertise.

Cyacomb, founded in Edinburgh in 2016, focuses on identifying illegal and harmful material on digital devices while limiting access to personal data that falls outside an investigation. Its tools are used by law enforcement and border agencies in several countries.

The launch reflects a wider push by technology suppliers to offer targeted forensic methods that can help agencies manage rising volumes of digital evidence while meeting privacy requirements. In this case, the system is designed to establish whether files already known to investigators are present on a device, rather than opening and reviewing all stored content.

Johnson said speed can be critical when investigators are trying to assess possible threats. "Digital devices can provide important insight into illegal or harmful material an individual has been accessing, but investigators may be faced with thousands of files and huge volumes of data when time is critical. The ability to rapidly establish whether known terrorist-authored material is present on a device can help investigators understand the potential risk posed by an individual faster. Technology has given those seeking to spread extremist material new ways to reach people. Law enforcement needs technology that helps it keep pace," he said.