2023 SC Awards Finalists: Best Computer Forensic Solution  

Detego Global’s Media Acquisition, a digital forensic investigation product, was designed to reduce backlogs and dependence on specialist labs and teams. It automates data capture from various devices, including computers, drones, and removable media, and lets users analyze data from multiple sources simultaneously. The software features advanced inspection tools, live data streaming views, and powerful data recovery capabilities. Business and technical advantages include significant time savings, increased efficiency, and accurate results. Media Acquisition empowers investigators of all experience levels to perform precise data extractions and in-depth analysis. It includes Detego Analyze, which offers AI-driven technology, workflow automation, and court-ready report generation. Media Acquisition features a patented red-amber-green visual alert system, simultaneous device handling, and Analyse feature. The product costs $1,900 per annum and includes regular updates every 6-9 weeks. Customers are said to have surpassed budgetary expectations because of flexible licensing costs, rapid investigation capabilities, and minimal training overheads.

LiveAction’s LiveWire, a forensic search solution, was designed for computer forensics professionals. The product captures packet data without impacting network performance, while offering advanced packet analysis, local wired and wireless capture, and Windows protocol analysis. LiveWire also integrates with LiveAction LiveNX, offering a single-pane view of the entire network, allowing professionals to troubleshoot problems and identify potential threats. Enterprises and SMEs can benefit from LiveWire’s enhanced visibility into latency and jitter, as well as its ability to identify over 2,000 applications. The SaaS-based Device Management Services platform lets security teams centrally-manage devices at remote sites through a single console, reducing on-site support and freeing up IT resources. LiveWire sets itself apart from competitors by reconstructing files and displaying their contents, as well as providing interactive visualizations of network communications. The product gets updated quarterly and offers a reduced total cost of ownership through LiveAction’s Device Management Service, which simplifies deployment and management processes. By integrating with other services like ThreatEye, ServiceNow, and Splunk, LiveWire promises cost savings and optimize resource allocation.

Mitiga’s IR2 was developed as a rapid incident response product for cloud and SaaS environments. By unleashing instant forensic-level answers, IR2 promises to help organizations accelerate investigations, minimize impact, and enhance cyber resilience against future attacks. This can potentially make customers ready, responsive, and resilient as the cloud and SaaS risk landscape evolves. Mitiga’s IR2 platform combines automated insights with support from expert cloud incident responders. The subscription-based model can help organizations reduce breach-related costs while making cloud and SaaS incident response expenditures more predictable. IR2 proactively gathers and analyzes data, enabling teams to speed up cloud investigations. The agentless design also eases deployment and scalability. IR2 runs on a SaaS model and gets updated daily with new features and capabilities, while its Cloud Attack Scenario Library gets updated 24/7. By reducing breach impacts, Mitiga’s solution can save customers millions of dollars during major cyber incidents. The real benefit: the efficient response enabled by IR2 potentially allows many customers to avoid invoking their cyber insurance. This can result in significant savings on policy renewals.

Netscout’s Omnis Cyber Intelligence offers real-time threat detection and back-in-time network investigations. By leveraging Netscout’s proprietary deep packet inspection and Adaptive Service Intelligence (ASI) technology, Omnis Cyber Intelligence promises comprehensive network visibility for effective cybersecurity. The solution integrates with commonly-used security technologies such as SIEM/SOAR from Splunk, IBM, and Palo Alto Networks, and security teams can deploy it across public cloud environments such as AWS, Google Cloud, and Azure. Omnis Cyber Intelligence offers many benefits: scalable packet-based network visibility, continuous packet capture and local storage, ML-powered analytics, and integration with existing Netscout network performance management products. With a total cost of ownership of $250,000 for a perpetual license, security pros can expect twice-yearly updates and a products designed for large enterprise-level organizations. By providing advanced indexing, retrieval technology, and an intuitive user interface, Omnis Cyber Intelligence lets companies  manage cybersecurity investigations across their entire network, reducing mean time to resolution and the risk of successful cyberattacks.

TSFactory’s RecordTS v7 Single Server Edition, a session recording and analysis product, was designed for various environments such as Microsoft Azure WVD & RDS, VMware Horizon, Citrix Virtual Apps and Desktops, and AWS. The product caters to industries that require session recording by law, including healthcare, banking, law enforcement, and government. It’s optimized for small offices with 1-2 servers to monitor and IT people can easily deploy it in minutes. RecordTS offers a low-cost, easily deployed, and low-maintenance option compatible with multiple environments and protocols. It can record both admin and user sessions, as well as published applications. The solution promises secure data storage and transmission, making it ideal for cloud deployments. The total cost of ownership for the Single Server Edition runs at about $350 per year, or $7 per user. The product gets updated regularly, often weekly, with minor feature improvements and bug fixes. RecordTS has gained significant market penetration, with an estimated 20% share in various sectors. The product has been adopted by organizations such as QVC, Bon Secours Mercy Hospitals, and the U.S. Secret Service for training, compliance, and forensic purposes.