Cyacomb Filter Builder Setup, Installation, and running software
This guide walks you through installing and using Cyacomb Filter Builder to create contraband filter plugins.
Introduction
Cyacomb Filter Builder is a tool to create a Contraband Filter Plugin (.cfp) from a folder
of local contraband (e.g. new content discovered during an investigation).The Contraband Filter Plugin is utilized when running Examiner Plus scanning.
A Contraband Filter Plugin file (.cfp) is a special Contraband Filter which extends
the detection capabilities of a Contraband Filter or Contraband Filter Set. They are
primarily intended to search for any new additional content without changing the
Contraband Filter or Contraband Filter Set they are loaded with. Contraband Filter Plugins can be built with up to 10,000 files
⚠️ Legal & Security Notice
When working with any sensitive or illegal content: (CSAM)
- Ensure the system is fully isolated from all networks (internet and internal).
- Follow your organization’s policies, procedures, and legal requirements.
- Handle all data in accordance with applicable laws and regulations.
Failure to follow these guidelines may result in legal or compliance violations
Ensure you have:
- The licensed Cyacomb USB labeled Cyacomb_FB.
- The device is formatted as NTFS.
- A folder containing the newly discovered content (e.g., CyberTip images/videos, etc.)
- At least 1 GB of free disk space for output
⚠️ Important: The smaller USB-A dongle is licensed only for running the Filter Builder software.
Register and Download
- Register on the Cyacomb Support Portal and wait for account authorization.
- Log in to the portal.
- From the homepage:
- Select Cyacomb Filter Builder
- Navigate to Software Downloads and download:
- Cyacomb Filter Builder installer
- Any required supporting files
- Navigate to Documentation and download the user manual.
Install the Software
- Extract all downloaded files.
- Save documentation in a dedicated folder (e.g., Cyacomb User Manuals).
- Run the installer and follow the prompts.
⚠️ Important:
- Do not launch the software immediately after installation.
- Administrator privileges may be required. Contact your IT team if necessary
Building a Contraband Filter Plugin
Step 1: Launch the Software
- Insert the licensed USB dongle.
- Open the Cyacomb Filter Builder application.
Step 2: Select Contraband Folder
- Click Select Contraband Folder or manually enter the folder path.
- Once a valid folder is selected, the Build Contraband Filter Plugin button becomes active.
Step 3: Build the Plugin
- Click Build Contraband Filter Plugin.
- Choose a location to save the output file.
- The system will generate a .cfp (Contraband Filter Plugin) file.
Note: Up to 10,000 files can be processed per build.
Step 4: File Validation
- Files are validated for format and compatibility.
- Unsupported or invalid files are automatically excluded.
- You may be prompted to include or exclude files that cannot be validated.
Supported File Types:
- Images: JPEG, PNG, GIF, BMP
- Videos: AVI, MPEG-1, MPEG-2, MP4, M4A
Step 5: Monitor Progress
- A progress bar displays processing stages:
- Collection
- Validation
- Plugin creation
- A summary report is automatically saved alongside the .cfp file.
Step 6: Reset or Exit
- Click Reset to start a new build
- Click Exit to close the application
Troubleshooting
USB Not Recognized
- Ensure it is the only USB device connected (if required by your environment)
- Try a different USB port
- Verify the device is detected by the system (e.g., in File Explorer or Device Manager)
Software Will Not Launch
- Run the application as Administrator
- Reinstall the software
- Check antivirus or endpoint protection settings for blocking behavior
License Issues
- Ensure the dongle is inserted before launching the software
- Confirm the system recognizes the dongle
- Try reconnecting the device or using another USB port
Support
For assistance, contact:
support@cyacomb.com