Cyber Security & Memory Forensics

Tools, Accessories & Solutions

WindowsSCOPE version 3.2 includes support through Windows 10 with advanced data search capabilities to find URLs, credit cards, names, etc. in captured memory. It is  the next generation in live memory forensics tools and memory forensics technologies — with customers in US, Canada, Europe, and Asia. It also provides the most sophisticated memory forensics analysis for security breaches. Now offering cloud rentals and node-locked version.

CaptureGUARD and Phantom Probe hardware accessories provide memory acquisition and magical access to locked computers (access live memory and encrypted disks without needing password).

Unlock Windows Computers with CaptureGUARD Gateway

Watch WindowsSCOPE in Action Detecting Stealth Rootkits

WindowsSCOPE Phantom Probe

A USB 3.0 dongle containing the WindowsSCOPE Phantom Probe that complements WindowsSCOPE Memory Forensics products. This dongle runs the WindowsSCOPE Phantom Probe Agent capable of capturing a WindowsSCOPE snapshot from any supported Windows computer when plugged in. Captured snapshots can be imported to any WindowsSCOPE repository and analyzed using the WindowsSCOPE cyber analysis GUI.

CaptureGUARD Express

This is an ExpressCard device capable of imaging the physical memory of the computer it’s connected to. Creates dump files in the standard WinDD format that can be used with WindowsSCOPE or with other WinDD compatible dump analysis tools.

CaptureGUARD Gateway

This is an ExpressCard platform that enables access to locked Windows computers allowing live forensic acquisition/analysis in these otherwise inaccessible systems. Operates on systems running Windows XP through Windows 7 with an ExpressCard slot. For Windows 8/10 or other operating systems and system configurations please contact