 |
|
|
|
What is Network Forensics
Network forensics is the collection, examination, and reporting of digital evidence on a live network environment. On an enterprise level, you don't have the luxury of shutting down machines that need to be investigated. You need a way to collect valid and verifiable evidence from machines on your network without the user even knowing it. As the lines between IT security and digital forensics become harder to distinguish, it is becoming more and more crucial for every enterprise to have a network forensic solution. Whether your plan calls for outsourcing to a digital forensic firm or whether you plan on training your own personnel, you can't afford not to have a solution.
The end game in any form of digital forensics is to be able to present viable evidence in court. This is easier said than done when it comes to digital evidence, especially from a live network environment. Forensically valid processes and tools need to be used to ensure the preservation of data. Litigation can come from anywhere. Employees, competitors, customers, shareholders, regulators...they all represent a real possibility of requiring you to present digital evidence in court. Paraben provides two options when it comes to network forensics. Paraben Enterprise is a solution that resides on your network constantly monitoring and collecting evidence grade data. It can be scaled to fit any sized network. Shuttle Pro is a portable solution that will allow you to respond to an incident to collect complete, forensic images of any system on your network. It can also reside on the network and connect to up to 25 machines at a time to perform searches and simultaneously acquire forensic images for up to 2 machines at a time.
|
|
|
|
