LinkScope Client
Description
This is the repository for the LinkScope Client Online Investigation software. LinkScope allows you to perform online investigations by representing information as discrete pieces of data, called Entities.
These Entities can then be explored through Resolutions, which take the attributes of Entities as input, and resolve them to different, but connected, pieces of information.
In that way, one can create a knowledge graph (or abstract art) for any particular domain, which should help investigators easily discover answers and insights that otherwise might have been hard to extract.
Features
Some notable features of LinkScope include:
Client
- Graph visualisation of information and their relationships
- Drag and drop interface to add new data
- Timeline of events based on creation date of entities
- Import browser tabs and take screenshots of your session
- Display locations on a world map
- Easily extensible to suit your specific needs
Server
- Collaborate with others live on projects
- Extract sentiment, entities and relationships from files
- Extract text from over 100 types of documents, and get summaries of the content for large files
- Ask the Oracle a question about the data, and receive an answer with context
Installation
Supported Platforms
Currently, Linux (Ubuntu, but most Debian derivatives should work) and Windows 10 are supported.
Note that the SFDP graph layout does not function on Windows, as an essential graph related library is not available on that platform. Windows also has a few more visual bugs than Linux, which are currently being worked on.
Installing the software
Since Version 1.0.0, installers are provided for Windows 10 and Linux (Ubuntu) platforms.
Download the latest installer for your platform from the Releases page, and run it to install the software: https://github.com/AccentuSoft/LinkScope_Client/releases/tag/v1.0.0
Running from source
One could also clone the repository and run the software as-is.
Some dependencies need to be installed in order for the software to work properly. After downloading the release correspoding to your platform from the Releases tab, please perform the following steps to install the required dependencies:
- Linux
sudo apt update && sudo apt install libopengl0 graphviz libmagic1 -y
pip install -r requirements.txt --upgrade
playwright install
- Windows
- Download and install the graphviz package from https://www.graphviz.org/download/
pip install -r requirements.txt
pip install python-magic-bin
playwright install
The software comes packaged in a 7zip archive. Uncompress the archive, and double-click the executable to start the software. On Windows, the executable should be named 'LinkScope.exe'. On Linux, it should be named 'LinkScope'.
Extending the software
LinkScope was built from the ground up to be modular! In this repository's wiki, there are instructions on how to create your own modules, which can contain custom Entities and Resolutions. There is also an example module in the Modules directory that can act as a template, and has a verbose description of most things that a module creator should need to consider.
Security and safety
A warning about using the software:
Do NOT use Resolutions obtained by untrusted sources.
Resolutions are essentially Python code that ingests information from various data sources. Make sure that the people providing you with code to run are trustworthy, and that you inspect all the modules you use before installing them. Pre-compiled binaries on systems without Python installed are not able to install new resolutions, so compiling custom versions of the client to suit your investigators' needs should effectively mitigate this risk.
Further reading
If you are interested in more information about using the software, tutorials and case studies, check out our blog at https://accentusoft.com/blog/.
If you would like to contribute a post about your use of the software, please send an email to [email protected].