All Binalyze resources in one place.
YARA is the swiss-army knife for pattern matching. It is easy to use, fast and powerful which already led to a quick adoption of it in a variety of platforms.
In the current cases in the DFIR world, there is a lot of confusion about which steps to take decisively and quickly at the endpoint side when something suspicious is found from the moment the investigation started, or from the moment the evidence is found.
Being agile in dealing with, and handling, digital evidence is of great use when an incident happens. However, applying system monitoring in your organizational network to achieve forensic readiness shows that an organization has the initiative and ability to manage risks effectively in real-time.
Binalyze AIR v1.8.0 RC is now available. The full production version of AIR 1.8.0 will be available on 18th August.
The outstanding coverage of Binalyze DFIR platforms for Windows clients is now also available for Linux. This was a popular request from a large number of our users and customers so we incorporated the feature into our roadmap right away. This Friday we will officially launch it.
SFTP home run. This Friday we will release the latest version of Binalyze AIR [1.7.35] which will include a number of powerful new features that will be announced individually in the run up to the launch.
New feature: AIR-QRadar integration. Now, an acquisition can be started by triggering AIR via QRadar (credits: Esra Kulüp)
Binalyze AIR release notes Version 1.7.45 (RC)
Throughout the digital evidence collection process all actions have to be taken in a secure manner. In the previous step we covered how to ensure that digital evidence is collected in a secure way, using appropriate tools, so the authenticity of the digital record is not compromised.
