Scanning for Primary Account Numbers (PANs) with 7Seec
’7seec’ PCI scan is a forensic software tool that 7safe has developed over the past two years for use in investigations to search for unencrypted cardholder data.
It finds credit card data in both allocated (live) and unallocated (deleted) disk space at tremendous speed. It is also “forensically safe” in that it does not alter data. 7Seec finds PANs (Primary Account Numbers based on the Luhn algorithm with false positive checking) and Track 1 & 2 data and utilises the “BIN” list.
Entire raw disk/Partitions/FileSystem (inc NTFS)/Folders/Individual Files/OS areas (files hidden from OS)/ Deleted file space/Restore Points/Alternate Data Streams/Locked Files/NTFS images (i.e. Forensic copies).
All text files as well as databases, MS Office files (Word, Excel, PPT- both new and old formats), Outlook PST email, WinZip32, uncompressed PDFs.
7Safe designed 7Seec (to aid a PCI scan) to be forensically sound as it works within memory only – it doesn’t alter document metadata & can be compiled for many OS types including Windows, Mac, Solaris and other *NIX.
Although our consultants use the 7seec command line version, we have also developed a basic GUI for demonstration purposes, which can be seen in the short video below.
