Being agile in dealing with, and handling, digital evidence is of great use when an incident happens. It is helpful to have a document that will clearly state the types of digital evidence required by a court or your internal compliance department, and how to collect them. Applying strategies to achieve forensic readiness shows that an organization has the initiative and ability to manage risks effectively.
Updated: 20.08.2024.
Once you complete a risk assessment of all your business operations, you can proceed to the second step of the forensic readiness plan which is identifying all types and sources of digital evidence in your organization.
Binalyze AIR v1.7.40 is now available.
We’re excited to announce the launch of Binalyze DRONE, a transformation to remote digital forensics investigations. This innovative new approach is built for organizations that need to perform agile, efficient, and remote digital forensics investigations.
Binalyze, the developer of the fastest and most comprehensive digital forensics solutions, has completed a rebranding effort in response to accelerated company growth. At the heart of this rebranding is customer-centricity.
Before we dive into how to use the Webshell Detection feature in DRONE here is a quick reminder on what a web shell malicious attack is capable of.
A couple of months ago we released our new DRONE solution, which is set to transform remote digital forensics investigation by giving you the capability to quickly understand your network by acquiring and analyzing data across all endpoints in minutes.
3 weeks ago, one of the biggest breaches happened where FireEye uncovered a malicious campaign that gained access to victims via trojanized updates to Orion, SolarWinds’ IT monitoring and management software. Being aware of the nationwide damages this breach will produce, Binalyze released an initiative where we decided to give support to SUNBURST damaged entities by releasing a version of Binalyze AIR with the codename SUNBURST that will enable anyone to identify their exposure to the attack and pinpoint their network vulnerability in under an hour.
This version is FREE of charge for 15-days and 25,000 endpoints.
Binalyze is the fastest evidence collection, triage, and IR investigation platform that now also contains the YARA Rules for SUNBURST thanks to our colleagues at FireEye. In the below lines you will find instructions how to perform a triage with already set YARA rules for SUNBURST in less than an hour.
Now it is time to showcase how easy it is.
Select an endpoint
Click on “Triage” button
Select both SUNBURST YARA rules and click on “Save”.
Triage is now in processing.
As said it is done in less than an hour or to be exact in 34 minutes.
To see full view of the investigation results click on “View”.
{{cta(‘cea177d3-11e7-42f2-a4b1-8007f735fad0’)}}
