Volatile Data Snapshot
The System Runtime Explorer (SRE) within Paraben's Enterprise displays voaitile client data such as active memory processes, files, executables, and DLLs associated with those processes, registry keys, protected storage, and even screenshots. A client snapshot takes this information and creates a report of the client activity at a moment in time. The snapshot will record a screenshot and details about the other volatile data. You can also initiate a Memory Acquisition from the SRE.
What You Get in a Snapshot
Processes
Displays all information about the processes currently running on the Agent's computer.
Drivers
Displays all information about drivers currently running on the Agent's computer.
Screenshot
Takes a screenshot of what is currently being displayed on the Agent computer's monitor.
Services
Displays all information about the services currently running on the Agent's computer.
Protected Storage
Displays all information about the processes currently running on the Agent's computer including logins and passwords.
Network Sessions
Displays all information about the network sessions currently started on the Agent's computer.
Open Handles
Displays all open processes associated with any specific running process.
