Guidance Software to Offer HBGary Responder™ for Live Memory Analysis

Guidance Software Inc. has announced a strategic alliance with HBGary Inc., a leading provider of security assessment solutions and services. Through this relationship, Guidance Software adds HBGary‘s unique live memory (RAM and volatile data) analysis solutions to its portfolio of digital investigative offerings. HBGary Responder™ gives forensic labs and government agencies the ability to collect digital evidence residing in live memory for prosecution, disciplinary action or intelligence gathering. Investigators can preserve volatile memory data, analyze the content and report on all live memory activity across the network…“We have entered a new era in security risks. Today’s increasingly sophisticated cybercrime incidents require agile yet expert digital forensic tools that can immediately assess an organization’s latest security breach. This alliance with Guidance Software will help organizations protect their confidential information and meet their necessary compliance,” said Greg Hoglund, CEO of HBGary, Inc.

With the enhanced view of live memory provided by HBGary Responder, investigators using EnCase® for their digital investigations can now detect, diagnose and respond to potential security incidents. Additionally, agencies now have access to a comprehensive profile of a subject, including their running processes, activities, open files, passwords and instant messages.

“Until now, investigators who needed to augment their computer forensic activities to include live memory capture and analysis were forced to rely on a time-consuming process using complicated, cobbled-together tools that could not scale to fit user needs,” said Gary Ulaner, Director of Product Management, Guidance Software. “No other product on the market has the ability to remediate and secure a rogue process hidden in RAM or volatile data like HBGary Responder. This capability, coupled with Guidance Software’s industry-leading EnCase solution, is a powerful solution for those who wish to expand their digital investigations to include live memory analysis.”

About Guidance Software (GUID)

Guidance Software is recognized worldwide as the industry leader in digital investigative solutions. Its EnCase(r) platform provides the foundation for government, corporate and law enforcement organizations to conduct thorough, network-enabled, and court-validated computer investigations of any kind, such as responding to eDiscovery requests, conducting internal investigations, responding to regulatory inquiries or performing data and compliance auditing — all while maintaining the integrity of the data. There are more than 27,000 licensed users of the EnCase technology worldwide, and thousands attend Guidance Software’s renowned training programs annually. Validated by numerous courts, corporate legal departments, government agencies and law enforcement organizations worldwide, EnCase is also frequently honored with industry awards and recognition from eWEEK, SC Magazine, Network Computing, and the Socha-Gelbmann survey.


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.

Unsubscribe any time. We respect your privacy - read our privacy policy.


About HBGary, Inc.

HBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing advanced computer analysis solutions for Information Assurance (IA) analysts, Computer Emergency Response Teams (CERT’s), and Computer Forensic Investigators to detect, diagnose, and respond to computer intrusions and other cyber crime activities. The company, which is headquartered in Silicon Valley , is privately held. For more information on the company, please visit: http://www.hbgary.com.

Leave a Comment