WindowsSCOPEA new version of WindowsSCOPE Cyber Forensics is now available. WindowsSCOPE version 3.2 now includes support for the latest versions of Windows operating systems through Windows 10. Also included with version 3.2 is WindowsSCOPE’s data search tool. Use it to find URLs, credit cards, email addresses, phone numbers, and other digital forensic artifacts hidden memory.
read moreThis article will show how you can use the ThreatSCOPE feature of WindowsSCOPE to detect rootkits installed on a system. One of the difficulties in detecting rootkits and other advanced malware is that they’re often packed, encrypted, or injected by other means than being run from an executable file on the disk. This means they can easily slip past most…
read moreCaptureGUARD Physical Memory Acquisition Hardware – ExpressCard This is an ExpressCard device capable of imaging the physical memory of the computer it’s connected to. It creates dump files in the standard WinDD format that can be used with WindowsSCOPE or with other WinDD compatible memory dump analysis tools. It connects directly to the physical memory to read its contents. It…
read moreCaptureGUARD Physical Memory Acquisition Hardware – PCIe Add-on This is a PCI Express add-on device* capable of imaging the physical memory of the computer it’s connected to. It creates dump files in the standard WinDD format that can be used with WindowsSCOPE or with other WinDD compatible dump analysis tools. It connects directly to the physical memory to read its…
read moreWindowsSCOPE Phantom Probe USB Dongle A USB 3.0 dongle containing the WindowsSCOPE Phantom Probe that complements WindowsSCOPE Cyber Forensics products. This dongle runs the WindowsSCOPE Phantom Probe Agent capable of capturing a WindowsSCOPE snapshot from any supported Windows computer when plugged in. Buy
read moreCaptureGUARD Gateway – Access to Locked Computers This is an ExpressCard platform that enables access to locked Windows computers allowing live forensic acquisition/analysis in these otherwise inaccessible systems. Watch this video demonstration of CaptureGUARD Gateway bypassing Windows login passwords. Buy
read moreWindowsSCOPE Forensic Archiving Appliance A high performance forensic appliance capable of performing network-wide live memory forensics, forensic archiving and incident response. Through the use of the WindowsSCOPE Cyber Forensics – Appliance, with TBs of storage, the solution is able to periodically collect live memory (snapshots/dumps) network-wide from each node, fully reverse engineer and archive them, and perform sophisticated analyses tracking…
read moreWindowsSCOPE Cyber Forensics 3.2 WindowsSCOPE is a GUI-based memory forensic capture and analysis toolkit. It supports the import of standard raw physical memory dumps which are then automatically reverse engineered and presented in an easy-to-view format for forensic analysis in a central location. It automatically identifies all processes, threads, and drivers running on the system as well as other system…
read moreWindowsSCOPE now offers PCI Express and ExpressCard platforms capable of imaging physical memory and providing other cyber security related capabilities even in locked computers. CaptureGUARD Gateway can be customized for various advanced cyber security and forensics use-cases not possible with other solutions on the market. Please contact us at support@windowsscope.com to explore how these capabilities can be tailored to meet…
read moreThe latest addition to the WindowsSCOPE product lineup, Cyber Forensics Ultimate, is now available at the online store. This new version incorporates all the interactive features of previous versions, including system-wide disassembly and control flow graphing of both user and kernel space. The 64-bit version enables support for importing memory dumps taken from any 64-bit Windows computer to your existing…
read more