|
Products
|
|
 |
|
 |
|
|
|
|
|
There's No Need to Disrupt Your Network to Create Forensic Images
The foundation of any network forensic solution must be in cross-network drive acquisitions.
Paraben's Enterprise solutions are based on innovative technology that
covertly acquires entire hard drives in a verifiable forensically sound manner.
By utilizing a hidden agent and managing everything through a secure proxy server,
all data is collected into an encrypted forensic storage container with a complete
audit trail that documents everything that occurs. Of course, you're not limited
to just hard drive acquisitions. You can acquire individual files or folders (including
active Exchange Server and PST files without data corruption), active memory, and
media connected to a client machine.
|
|
|
Paraben's Enterprise Drive Acquisitions
|
|
|
Acquire Hard Drives
Acquire an entire hard drive without the end-users knowing their drive is being
acquired. You can have three active acquisitions occur simultaneously. You also have many options for drive acquisitions. You can acquire a physical drive, logical drive, or files and folders on a drive.
|
|
|
Acquire HPA
HPA (Host Protected Area sometimes referred to as a Hidden Protected Area) is an area of a hard drive that is not normally visible to an operating system (OS). Paraben's Enterprise solutions allow you to acquire the HPA.
|
|
|
Schedule Acquisitions
You can easily schedule multiple acquisitions. As one acquisition finishes, the
next will automatically begin. This will allow you to focus efforts on analysis
while the next drive is being acquired.
|
|
|
Keep it Covert
If a user knows they are being investigated, they could easily destroy evidence.
Not only is the Paraben Enterprise Agent covert, once an acquisition starts, all user
activity dealing with data being acquired is saved to memory to be written after the acquisition is finished. This
means less evidence can be destroyed after an acquisition has begun.
|
|
|
Shuttle Pro Drive Acquisitions
|
|
|
|
Acquire Hard Drives
Acquire an entire hard drive without the end-users knowing their drive is being
acquired. You can have two active acquisitions occur simultaneously. You also have many options for drive acquisitions. You can acquire a physical drive, logical drive, or files and folders on a drive.
|
|
|
Keep it Covert
All of Paraben's Enterprise agents are covert. Once an acquisition
starts, all user activity is saved to memory to be completed after the acquisition
is finished. This means less evidence can be destroyed after an acquisition has
begun.
|
|
|
|
|
 |
|
 |
|
|
|
|
