| |
|
|
 | | Home > Solutions > eDiscovery and Digital Forensics | | eDiscovery and Digital Forensics | An imperative part of any holistic data security strategy and equally as important as preventive activities, data forensics are a critical component of any “defense in depth” security program. Forensic information can be critical evidence in many types of criminal and civil litigation including fraud, theft or misappropriation of trade secrets and other internal/confidential information. There are two critical components of computer forensics; investigation and eDiscovery, and protection of evidence.
Investigation and eDiscovery Includes:- Data discovery based on investigation parameters like user, machine and subject including: hidden files, password-protected files, and encrypted files
- Analysis of all possibly relevant data found across multiple systems.
- Discovery Reports detailing the user or group, computer systems accessed, listings of all possibly relevant files and discovered file data
- Investigative reports detailing target data authorship information, attempts to hide, delete, protect, encrypt, copy, cut, paste, print or screen capture information
Protection of evidence Includes:- Minimize any possible evidence damage or destruction
- Record any activities showing tampering, damage or destruction
- Maintain a continuous chain of custody of evidence
- Eliminate any business operations affected by investigation or discovery
The Verdasys Difference
Digital Guardian increases the efficiency of investigation work by providing complete data visibility and comprehensive, forensic-level analysis of all data located on Digital Guardian protected applications, servers, workstations, desktops and laptops across the enterprise. Digital Guardian's flexible reporting capabilities and integrated “case analysis” solution are fully configurable to meet investigative and eDiscovery as well as protection of evidence requirements.
Multiple Verdasys customers have successfully utilized Digital Guardian computer forensics information in litigation against IP loss including a privileged user stealing critical design data and taking it to a competitor and a group in privileged users on a design team attempting to sell new product design specifications to a foreign competitor. Digital Guardian's fully integrated data forensic capabilities reduce the time and cost of investigations while maintaining the “proper” forensic data collection and protection requirements.
Unique Capabilities - Securely investigate/analyze data on any Digital Guardian protected machine
- Collect, aggregate and format all data related activities in a forensically sound manner
- Reduce incident impact and eliminate system downtime during investigations
- Efficiently analyze only potentially relevant data upon investigation requests
- Identify data security events and employee integrity issues wherever they are taking place on or offline without alerting targets
- Monitor and audit all privileges users actions including investigative activities once a case has been opened
- Download all audit information to third party case tools as needed
|
|
|
