e-fense solutions. Effective – and cost-effective

	Helix Live CD e-fense’s live forensics and incident response CD, Helix is a customized CD with a forensically sound boot environment and a special live environment. Visit the Helix site H3 Enterprise e-fense’s flagship incident response, forensics and e-discovery suite must be seen to be believed. Based on the worldwide success of the Helix Live CD, e-fense has created a new product to work at the enterprise level. H3E can respond immediately to threats; image drives; image volatile data, including system RAM; and scan users’ Internet history and documents. Look no further than H3E for your e-discovery needs. Aperio e-fense® was asked to deliver a product that could acquire volatile data from a system onto a USB thumb drive. Aperio is the answer. Built on H3E technology, Aperio quickly acquires data using e-fense patent-pending technology.

Remote Forensics and Surveillance
Today’s world is increasingly litigious. Companies find themselves in the middle of legal action and must be able to make data available quickly, usually from digital storage. Other cases including employee misconduct, requiring a forensic response, including imaging and examination of hard drives. These issues can put pressure on already-taxed IT security teams. Incident response and e-discovery requirements are handled incorrectly, leaving the company open to criticism and legal action.

A cost-effective solution from e-fense now exists for IT security teams. IT can manage its legal responsibilities from a central location using software that ensures forensic integrity of data. Machines in the enterprise can be examined, hard drives imaged for forensic examination and necessary surveillance carried out – from any location around the globe (law allowing).

Intelligent monitoring
This solution revolves around tiny, covert software agents that can be deployed using standard patch management systems. The agent provides a point of contact for the console, which is used by the security team to communicate with each PC or server. The agent allows the console to connect to it using encrypted authentication and provides the operator with the ability to collect volatile evidence, RAM – even the entire drive. The agent also provides abilities to monitor the computer for anomalous activity that can be set by the operator. 

E-discovery
Increasing legislation, especially Sarbanes-Oxley in the U.S., is causing problems for companies when e-discovery demands are made upon them. Our solution simplifies the issues by allowing the operator to instruct each deployed agent to search for defined data criteria, and either copy the data to a central store or report its presence.

Although there are other solutions in the marketplace that provide some of these elements, the e-fense solution is not bound to any specific forensic examination platform and is significantly more cost-effective.