THE PRODUCTS
Are you looking for Forensics Product?
ProDiscover Incident Response
ProDiscover Incident Response® enables you to quickly and thoroughly examine a live system operating anywhere on your network. When used as part of an incident response procedure or as part of a routine system audit, ProDiscover Incident Response® enables you to determine if that system has been compromised and allows you to gather the evidence needed to prove it.
- Quickly verify if your system has been compromised without taking the system down.
- Create a bit-stream copy of the compromised system disk and memory to enable you to quickly restore the system without losing valuable evidence.
- Analyze remote systems over the network eliminating the need to hire expensive staff or travel to remote locations.
- Access suspect system disk at the sector level, revealing all files even if suspect system has been compromised by Trojan or rootkit.
- Search entire disk, including slack space, Windows NT/2000/XP Alternate Data Streams and even HPA section (patent pending), for complete system integrity.
- Find files and processes that cannot be seen by suspect system O/S.
- Create system baseline for later comparison to uncover altered files.
- Remote agent may be preinstalled or pushed out, installed, and run remotely in normal or Stealth mode (with System Administrator privileges) to avoid detection.
- Utilizes user provided or National Drug Intelligence Center Hashkeeper database information to positively identify all system files.
- User selectable 256 bit AES or Twofish encryption protects data transfers and remote system access.
- GUI interface and integrated help function assure quick start and ease of use.
- Examine FAT12, FAT16, FAT 32 and all NTFS file systems including Dynamic Disk and Software RAID for maximum flexibility.
- Examine Sun Solaris UFS file system and Linux ext2 / ext3 file systems.
- Integrated graphics thumbnail viewer and registry viewer.
- Extracts EXIF information from JPEG files to identify file creators.
- Linux boot disk provided to image systems without removing hard disk drive.