Difference between pages "ADF Solutions" and "LiveDiscover"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
 
 
Line 1: Line 1:
=Overview=
+
'''LiveDiscover™ Forensic Edition''' [https://www.wetstonetech.com/cgi/shop.cgi?view,4]
<p> [http://www.adfsolutions.com Advanced Digital Forensic Solutions, Inc.](ADF Solutions, Inc., or ADF Solutions) is a privately held, minority-owned small business based in Bethesda, Maryland. The company was founded in 2005 by J.J. Wallia and Raphael Bousquet. </p>
+
<p>ADF Solutions develops tools for media exploitation (MEDEX) and [[digital forensics]] triage. These tools scan computers and digital devices and rapidly extract intelligence and evidence to identify individuals who are a threat to public safety or national security. They are used in digital forensic labs and used by field operatives in defense, intelligence, law enforcement, border security, and other government agencies worldwide. </p>
+
  
=ADF Products=
+
==  ==
<p>ADF offers [http://http://www.adfsolutions.com/products/ three main products]: Triage-G2, Triage-Examiner, and Triage-Responder. </p>
+
LiveDiscover Forensic Edition (FE) is the premier tool for rapid full distributed network assessment and mapping, which is a critical first step in any digital investigation. Designed for forensic investigators, LiveDiscover FE rapidly scans a range of IP addresses and generates comprehensive forensic reports including easy to view graphs on each located  device within the specified network. With the case management features, investigators can tailor reports and case details,making evidence court ready. Built-in customization allows for the creation of modified vulnerability scripts making LiveDiscover FE field extensible.  
<p>[http://www.adfsolutions.com/products/triage-g2 Triage-G2] is a media exploitation ([[MEDEX]]) tool used by field operatives to extract intelligence from computers and peripheral devices. Triage-G2 was specifically designed to be used by nontechnical operators and deployed using a small, portable triage key (a 32GB USB drive) that doesn’t require a computer or other heavy equipment for field deployment. The keys can be prepared in advance at the base or in the field by using one click to select mission-specific search criteria. Triage-G2 is used by several U.S. defense and intelligence agencies. </p>
+
<p>[http://www.adfsolutions.com/products/triage-examiner Triage-Examiner] is used by forensic examiners to scan suspect computers and prioritize the computers for full forensic examinations. Triage-Examiner is used by [[Law Enforcement]] agencies worldwide. Triage-Examiner Lab Add-On is an additional software component that works with Triage-Examiner for examiners who need to run the software on their laptops or forensic workstations to scan drive images, physical drives, DVDs, CDs, and other removable media that are connected to the workstation. </p>
+
<p>[http://www.adfsolutions.com/products/triage-responder Triage-Responder ]is designed for nontechnical law enforcement investigators in the field to scan suspect computers for evidence of a crime. This tool also uses lightweight USB deployment and provides detailed field reporting capabilities. This tool was developed in partnership with the U.S. Department of Homeland Security Science and Technology Directorate. </p>
+
  
=Discontinued Products=
 
• Triage-ID® <br>
 
• Triage-Lab® <br>
 
• Triage-Investigator®
 
  
=ADF Patented Technology=
+
'''Key Features:'''
ADF Solutions has been granted two U.S. patents (#7,941,386 and #8,219,588) for its SearchPak® technology.
+
  
=SearchPak®=
+
Live forensic network discovery, Live forensic vulnerability assessment, Automatically identify operating systems including Windows, Unix, Linux, Mac, VMS, Novell, and Sunsystems, Remote detection of system status including running services, attached devices, and open shares, Forensically map communication devices, printers and more, Forensic detailed report generation
<p>The SearchPak is a container of forensic search intelligence. It allows analysts and operators to precisely describe the forensic search or data exploitation to be conducted on a target system. As a secure container, the SearchPak can be used to automate recurring data exploitation jobs and can be shared among agencies or between operators.
+
SearchPaks can be user-defined and are encrypted with an AES 256-bit [[encryption]] key. </p>
+
<p>Agencies can create their own SearchPaks and share them among examiners, teams, and other operators.</p>
+
  
<p>SearchPaks can be generic or mission-specific: </p>
 
Examples of Generic SearchPaks <br>
 
<blockquote>• Collect all pictures, videos, and documents accessed in the past six months on a target machine. <br>
 
• Detect any installed application that can facilitate hiding data. <br>
 
• Collect all iPhone backup files. </blockquote>
 
Examples of Mission-Specific SearchPaks <br>
 
<blockquote>• Collect files that match a set of known hash values. <br>
 
• Collect all documents, text files, or emails that contain the keyword “Operation Kandahar.”</blockquote>
 
  
=DHS S&T First Responder Cyber Forensic Field Kit=
+
'''System Recommendations:'''
In 2010, ADF Solutions was selected by the U.S. Department of Homeland Security Science and Technology Directorate to develop a universal forensic triage field kit that would aid law enforcement officers in extracting information and evidence from computers and other devices being examined in active criminal or terrorist investigations. Once extracted, the data can immediately be viewed, so investigators can take appropriate action while saving the data for future forensic analysis.
+
<p>As the result of this DHS initiative, ADF Solutions released Triage-Responder in 2012. The tool is being deployed to federal, state, and local law enforcement agencies throughout the U.S.</p>
+
  
=Media Exploitation=
+
Microsoft Windows® 2000, XP, Vista, 20 MB free disk space, 256 MB RAM, Pentium® III 1GHz processor
ADF Solutions focuses on digital forensic triage and can be applied to document and media exploitation. Triage-G2 has features designed specifically for media exploitation. <p>
+
According to technopedia.com, document and media exploitation is defined as the extraction, translation, and analysis of physical and digital documents and media to generate useful and timely information. Also known as DOMEX, it is a very similar discipline to computer forensics or digital forensics.</p> 
+
  
=Company Timeline=
 
  
2005: ADF Triage-ID® field forensic triage tool is released <br>
+
'''License:'''
2006: ADF Triage-Lab® forensic triage tool for laboratory is released <br>
+
2008: ADF Solutions releases Triage-Live®, a forensic triage tool to scan a powered-on computer <br>
+
2009: ADF Solutions granted U.S. patent for forensic triage technology <br>
+
2010: Complete ADF Triage platform released: Triage-Examiner® and Triage-G2® <br>
+
2010: ADF Solutions granted another U.S. patent for forensic triage technology <br>
+
2011: ADF awarded contract from the U.S. Department of Homeland Security to build triage “First Responder Cyber Forensic Field Kit” <br>
+
2012: ADF releases Triage-Responder®, a forensic triage tool designed specifically for first responders and nontechnical investigators <br>
+
  
=News=
+
Single user license, Site licenses are available upon request
<p>Digital forensic triage and/or ADF Solutions has been described or highlighted in many different publications:</p>
+
• [http://www.adfsolutions.com/about/driving-efficiencies-npia-pilot-program-is-a-major-success-describes-article "NPIA Pilot Program Is a Major Success"] <br>
+
• [http://www.adfsolutions.com/about/success-of-npia-eforensics-pilot-set-to-help-forces-bring-more-offenders-to-justice-quicker Success of NPIA e-Forensics pilot set to help forces bring more offenders to justice quicker (NPIA Press Release)]<br>
+
• [http://www.scmagazine.com/adf-solutions-triage-examiner/review/3645/ SC Magazine Issues 5-Star Rating of Triage-Examiner 3.3]<br>
+
• [http://f-interviews.com/2012/03/01/interview-with-harry-parsonage/ Insights into Digital Forensics: Interview with Harry Parsonage]<br>
+
• [http://www.nottinghamshire.police.uk/newsandevents/news/2012/february/13/software_helps_capture_online_paedophiles/ Digital Forensic Triage Gets Tangible Results, Secures Convictions]<br>
+
• [http://www.publicservice.co.uk/news_story.asp?id=18041 Police to speed up e-forensics to bring offenders to justice]<br>
+
• [http://www.popularmechanics.com/technology/military/news/the-special-operations-forensic-tool-kit-metal-tec-1400#slide-10 Popular Mechanics: The Special Operations Forensic Tool Kit]<br>
+
• [http://www.thisisnottingham.co.uk/New-software-help-police-catch-web-paedophiles/story-12264526-detail/story.html New software to help police catch web paedophiles (Nottingham Post)]<br>
+
• [http://cyberspeak.libsyn.com/cyber-speak-november-1-2010http-adfsolutions-com- ADF on CyberSpeak’s Podcast]<br>
+
• [http://www.dfinews.com/article/parameters-selecting-triage-tool DFI News: Parameters for Selecting a Triage Tool]<br>
+
• [http://www.adfsolutions.com/about/graduates-find-incubators-help-breed-success Graduates Find Incubators Help Breed Success]<br>
+
• [http://www.adfsolutions.com/about/uk-force-has-cut-huge-backlog-using-new-triage-id-scanning-software UK force has cut huge backlog using new Triage-ID scanning software]<br>
+
• [http://www.adfsolutions.com/about/uk-police-we-need-crime-breathalysers-for-pcs UK police: ‘We need crime breathalysers for PCs’]<br>
+
• [http://www.adfsolutions.com/about/smart-software-helps-secure-quick-conviction Smart software helps secure quick conviction]<br>
+
• [http://www.adfsolutions.com/wp/wp-content/uploads/notts-police-leads-uk-in-chil1.pdf Notts Police Lead UK in Child Porn Fight]<br>
+
• [http://www.adfsolutions.com/wp/wp-content/uploads/times-colonist-digital-times-colonist-23-apr-2007.pdf Child porn scanner averts cop burnout]<br>
+
• [http://www.adfsolutions.com/wp/wp-content/uploads/ICYA2006Finalists.pdf Finalists Selected for 2006 Maryland Incubator Company of the Year Awards]<br>
+
• [http://www.washingtonpost.com/wp-dyn/content/article/2006/03/26/AR2006032600808.html Washington Post – Start-Up section]<br>
+
• [http://www.adfsolutions.com/wp/wp-content/uploads/mips_r37_release1.pdf New Cancer Test, Arthritis Treatment, Digital Forensic Tool Among 14 Announced University of Maryland MIPS Research Projects]
+
  
=Social Media and other Websites=
 
<H4>Social media</H4>
 
<p>[http://www.facebook.com/adfsolutions Facebook]<br>
 
[https://twitter.com/adfsolutions Twitter]<br>
 
[http://www.linkedin.com/company/247174?goback=%2Efcs_GLHD_adf+solutions_false_*2_*2_*2_*2_*2_*2_*2_*2_*2_*2_*2_*2&trk=ncsrch_hits LinkedIn]<br>
 
[http://www.youtube.com/user/ADFSolutionsInc You Tube]<br>
 
[https://plus.google.com/u/0/116499277699076435840/posts Google+]</p>
 
<H4>Other Websites</H4>
 
[http://www.adfsolutions.com ADF Solutions]<br>
 
[http://www.forensictriage.com Forensic Triage]<br>
 
[http://www.mediaexploitation.com Media Exploitation]
 
  
=Contact=
+
----
ADF Solutions, Inc.<br>
+
7910 Woodmont Ave. Suite 260<br>
+
Bethesda, MD 20814<br>
+
http://www.adfsolutions.com/
+
  
 +
'''Contact Information:'''
  
[[category:ADOMEX]]
+
1-877-WETSTONE ext. 2
 +
 
 +
www.wetstonetech.com [https://www.wetstonetech.com/index.html]

Revision as of 13:08, 6 October 2009

LiveDiscover™ Forensic Edition [1]

LiveDiscover Forensic Edition (FE) is the premier tool for rapid full distributed network assessment and mapping, which is a critical first step in any digital investigation. Designed for forensic investigators, LiveDiscover FE rapidly scans a range of IP addresses and generates comprehensive forensic reports including easy to view graphs on each located device within the specified network. With the case management features, investigators can tailor reports and case details,making evidence court ready. Built-in customization allows for the creation of modified vulnerability scripts making LiveDiscover FE field extensible.


Key Features:

Live forensic network discovery, Live forensic vulnerability assessment, Automatically identify operating systems including Windows, Unix, Linux, Mac, VMS, Novell, and Sunsystems, Remote detection of system status including running services, attached devices, and open shares, Forensically map communication devices, printers and more, Forensic detailed report generation


System Recommendations:

Microsoft Windows® 2000, XP, Vista, 20 MB free disk space, 256 MB RAM, Pentium® III 1GHz processor


License:

Single user license, Site licenses are available upon request



Contact Information:

1-877-WETSTONE ext. 2

www.wetstonetech.com [2]