WetStone Technologies LiveDiscover Forensic Edition
Strengths: Easy to use tool with some nice information-gathering features.
Weaknesses: Limited usefulness by itself -- however, as part of an overall toolkit, indispensable.
Verdict: Add this to Gargoyle, LiveWire and some of the other WetStone products for a solid kit supporting other larger-scale tools.
SummaryWetStone Technologies LiveDiscover is an interesting tool. This product is designed as a first step in locating target systems in large networks. LiveDiscover features the ability to run a discovery based on an IP address or IP range to find information on systems, such as the operating system, MAC address, host name, running services and many other useful pieces of information. This product also has the ability to map network segments and do some first level vulnerability analysis.
This product is very simple to install and use. Installation is run as an MSI file when the CD is loaded into the system. After a few minutes, installation of both the product and dongle drivers is complete and the program is ready to go. To start an investigation the user just follows a few simple steps from a wizard and LiveDiscover does the rest. Once the scan is complete, the investigator can go through the discovered nodes and easily find information.
From a performance standpoint, this is a great product. It is not only simple to install and use, but it only has a small network footprint, so an investigation can take place without disrupting anything else. This product also goes beyond just servers and workstations. It can also forensically map switches, CD servers, jukeboxes and online storage. This provides the ability to get important information on almost any device running on the network.
This product comes with a short PDF user guide. This guide illustrates product features by showing simple steps in running an investigation starting from the discovery wizard through viewing data and reports. The guide features many labeled screen shots and step-by-step instructions.
Purchase of LiveDiscover includes one year of product maintenance. WetStone also has phone and email support available, as well as a small support area on the website. This area includes a FAQs section and driver downloads for the dongle.
At a price just shy of $2,000, this product is a good value for the money. While it does have some very excellent features, it is intended only as a starting place for an investigation.