Archives
May 2010
April 2010
March 2010
February 2010
January 2010
2009
2008
2007
Search
Tags
Business Security Practice
Careers
Compliance Practice
Contact Us
Data Security Practice
Digital Forensics
English Posts
Events and Talks
Incident Management
IncMan Suite
Italian Posts
Lavora con noi
Link and Strategic Relationships
Log Management
News
PTK
Resources
Romanian
Training
News & Press
DFLABS and the PTK team are pleased to invite you at the "The Sleuth Kit and Open Source Digital Forensics Conference" in in Chantilly (VA - USA), a unique opportunity to network with colleagues and hear from leading open source developers.
Scheduled to speak are Brian Carrier (author of "The Sleuth Kit"), Harlan Carvey, Simson Garfinkel, Cory Altheide, Jamie Butler, Dario Forte (Founder and CEO DFLABS, the PTK maker), Rob Joyce, and others.
Learn how open source forensics tools can be used to solve the challenges of large data sets from different environments. Learn how PTK forensics future roadmap will allow the forensic community to improve its work. Join in open, frank round table discussions about the strengths and weaknesses of existing open source tools.
Who Should Attend:
- Digital forensics examiners who want to learn more about using open source tools.
- Digital forensics examiners who want to meet colleagues who also use open source tools.
- System integrators that develop automated systems to process hard drives and removable media.
- Developers who want to get involved with open source forensics tools.
- PTK forensics users community
Agenda
Registration
See you in Chantilly!
Qui il link per l'iscrizione.
Regarding the increasing success of PTK Forensics we posted an article "SIFT Workstation 2.0: SANS Investigative Forensic Toolkit" written by Russ McRee, (GCIH, GCFA, GPEN, CISSP, team leader and senior security analyst for Microsoft's Online Services Security Incident Management team) as he tested PTK for ramdump analysis. The PTK Forensics inclusion in the SANS Investigative Forensic Toolkit confirms the interest of the community in our project.
New Features are going to be included in the IncMan Suite, the Ultimate Incident Management Software From DFlabs.
Synchronization
The synchronization module was developed thanks to our experience and inserted in the Incident Management Suite as it answered operational requirements. The coordination option, designed for the management of investigation teams and thus available with DIM module, keeps case information updated. For example, if a number of investigators work in succession on the same case, they will be able to synchronize their copy of the database and keep it constantly updated to keep up with the overall progress on the job.
An example may help to make this clearer. An investigator takes on a case and notes down all the available data on his laptop. Back at the office or at home using a network connection, he synchronizes his local database with the remote back-end database. Another investigator continuing with the same case the next day just has to "upload" the case information from the back-end database and carry on the work. The only thing the user has to worry about is to know the name or ID of the case he or she is working on. If local case information is present, the program verifies just how recent it is and synchronizes it with the back end, which thus remains constantly updated in terms of progress on the investigation. DIM module enables the synchronization between the local and the remote database. This feature is useful when investigators have to carry out tasks out of the office or when they don't have the possibility to connect themselves to the local database.
It is possible, for every investigator, to synchronize his own local database and download all the updated information concerning a case. At the end of the operation, the operator can insert the data in the central database in order to render them available for other activities.
Whistleblower Capability
As stated by the Society for Human Resource Management, In the fast-paced world of business, many employers cannot react fast enough when faced with a whistle-blower who is working inside their own company. The whistle-blower protections of SOX (SOX) prohibit publicly traded corporations from taking any adverse employment action against an employee that has blown the whistle on the company (18 U.S.C. 1514A(a)). SOX protections are triggered when an employee internally reports or externally discloses conduct he or she reasonably believes constitutes a violation of mail, wire, bank or securities fraud.
Whistleblower service is for any organisation aiming to minimise workplace misconduct through the use of an independent and trusted whistleblowing reporting mechanism. Our Incident Management Software, supports all certification and accreditation processes required by sections 3505 and 3544 of the Federal Information Security Management Act (FISMA), as well as the ability to report and manage incidents associated with government facilities and systems. IncMan Suite also provides a turnkey solution for compliance with the whistleblower capability of Sarbanes-Oxley sections 301 and 302. Incident, fraud, and the abuse of authority can all be combated by having an independent reporting mechanism that uses employees to report malfeasance. Each administrator can choose the information required by the whistleblower form and, through, the admin page can convert a single report into incident and continue to manage it in the IncMan module and/or DIM module.
With this features the investigator and their companies can:
- Save time and money
- Increase confidence
- Gain insight with an effective management tool.
Forensic Lab Management
Lab Management (IMS-LM) is more than a simple Laboratory Information Management Systems (LIMS) software, is an extended component of Incident Management Suite. Built on the IMS platform, Lab Manager is designed to be used by investigators. With the Lab Manager component, your investigator can integrate lab activities into your organization's quality management lifecycle so that you can centrally manage all
resources: software and hardware. Lab Management, the new inventory management software, tracks and manages lab resource requests by viewing the status of all requests, assigning requests to lab personnel.
Like the rest of the Suite, Lab Management supports:
- Sample and container tracking
- Chain of custody
- Storage capacity and location management
- Barcode compatible
The Lab Management allows end-users to know where everything has been and for how long. The IMS-LM (Incident Management Suite - Lab Management) if fully integrated with the DFLabs Incident Management Software.
More infos can be found here
Milano, Italy (March 30, 2010) - eDiscovery Solutions Group (eDSG), an emerging leader in providing comprehensive eDiscovery and Governance, Risk and Compliance (GRC) consulting, services and technology worldwide announced today that it has added Dario Forte to its Advisory Board.
Dario Forte is the DFLabs Founder and CEO, an Italian based advisory firm specializing in Governance Risk and Compliance (GRC), eDiscovery, Computer Forensics and Cyber Security technology.
Starting his career in computer forensics as a member of the Italian Financial Police, Mr. Forte has consulted in the United States with well known government agencies such as the NASA and the Department of Homeland Security. Mr. Forte is an Associate Professor at the University of Advancing Technology and an Adj. Professor at Università Statale di Milano where he lectures on Information Security Management.
Mr. Forte has collaborated with international editorial boards such as Springer, WIley, Elsevier Scienceand has been the keynote speaker at numerous international conferences organized by NATO, World Bank, Computer Security Institute, RSA Conference, U.S. Department of Defense. He is also in the Board of Advisors of Elsevier Science Group.
Mr. Forte is a certified CFE, CISM, CGEIT and has a degree in Organizational Sciences from the Università di Torino, a post graduate degree in security and an MBA from the University of Liverpool.
"We are extremely pleased to have someone with the extensive international experience in cyber crime, computer forensics, eDiscovery and GRC as Dario to join our Advisory Board," stated Charles Skamser, President and CEO of eDiscovery Solutions Group. "He will be an excellent source of knowledge and practical experience as eDSG expands its consulting practice worldwide," added Mr. Skamser.
'It is an honor for me to work with eDSG' said Mr. Forte. 'I strongly believe that eDSG is one of the few international organizations that truly understands and has the vision and partnerships to address the GRC and eDiscovery paradigm shift that is occurring within corporations worldwide. My personal goal will be contribute to eDSG's growth, along with continuing to help maintain a high level of excellence in service, consulting and technology delivery', added Mr. Forte.
About eDiscovery Solutions Group
With a growing consortium of partners worldwide, eDiscovery Solutions Group (eDSG) offers a broad array of eDiscovery and Governance, Risk and
Compliance (GRC) consulting, services and technology along with project management to meet the demands of its Global 2000 clients base. For more
information about eDiscovery Solutions Group, please visit: http://www.ediscoverysolutionsgroup.com.
eDiscovery Solutions Group Business Networking Links
Follow the eDiscovery Solutions Group on Twitter.
Join the eDiscovery Solutions Group on Linkedin.
Join the eDiscovery Solutions Group on Facebook.
Follow the eDiscovery Solutions Group Blog.
Press Contact:
Director of Marketing
eDiscovery Solutions Group
PO Box 2299
Eagle, Idaho 83616
Main: 866-611-7522
email: sales (at) ediscoverysolutionsgroup (dot) com
Web: www.ediscoverysolutionsgroup.com
With the accelerating increase in the volume of Electronically Stored Information (ESI) along with the growing international threat of cyber attacks, managing information security incidents is a mission critical task for any company. eDiscovery Solutions Group (eDSG) invites you to attend a 30 minute Webcast to discuss the information security management challenges facing IT departments and other corporate stakeholders and demonstrate the IncMan Suite, an advanced information security incident management system from DFLabs.
IncMan Version 3.0 enables enterprises worldwide to manage information security incidents, within a single framework available both as a conventional software platform, an appliance and/or delivered via Software-as-a-Service (SaaS), according to the customer needs.
DFLabs had previously released Digital Investigation Manager (DIM) and ITILity Help Desk Manager as standalone components. With the release of IncMan, these components have been enhanced and are now integrated into a comprehensive solution that enables enterprise GRC, information security management and IT help desk teams to collaborate to catalog security incidents and other GRC and eDiscovery information management tasks from detection to investigation to mitigation to closure and report generation without the need to move data between disparate systems.
More Infos Here
DFLabs, European leader in the field of Information Security Risk Management, announces the release of version 3.0 of the IncMan Suite, the solution that allows large organizations to manage information security incidents, within a single framework. IncMan Suite controls and manages the entire incident management flow, from artifact analysis to assessing the damage undergone and to complete cataloging and indexing of the digital evidence. DFLabs' IncMan Suite is made up of three modules that can operate both autonomously and integrated. The complete version of the Suite contains: IncMan Module, Digital Investigation Manager (D.I.M.) and ITILity Help Desk Module.
The IncMan module is an integrated component in order to catalog every security incident from detection and mitigation to closure and report generation, thus guaranteeing the compliance with standards such as IODEF (RFC 5070). It enables the investigator to catalog and manage all information related to a breach of security incident. These incidents require specialized handling of a vast number of data inputs including the listing of all assets involved, artifact analysis and so on. With IncMan Module, everything can be tracked and managed.
D.I.M., the Digital Investigation Manager, is the forensic and evidence management module. This component manages images from the forensic duplication of the memory, photographic catalog, log files, thorough Chain of Custody details and interactions with authorities. For the forensic investigation processes, essential today in all large and medium-sized organizations, D.I.M. is a vital support system ensuring compliance with regulatory requirements through appropriate storage and reporting of all information gathered while investigating a case.
The third component, ITILity Help Desk, enables an IT support center to centrally manage all calls and trouble tickets while sending real time notifications regarding the management of respective security incidents. Additionally, the IncMan Suite Console contains a control dashboard allowing all parties involved, including the company's CSIRT (Computer Security Incident Response Team) to simultaneously manage a security incident. Every member of the team can be assigned specific privileges, roles and activities that are centrally controlled. Thus, messages, tickets, tasks, damage assessment, legal and security aspects are dealt with in detail. 'We are particularly proud of the development effort that went into this latest release of our IncMan Suite,' declared Dario Forte, CEO and Founder. 'Thanks to this new arsenal of tools, Chief Executive Officers, Compliance Officers, and IT Executives are now better equipped to respond to cyber-security incidents, precisely assessing the costs involved, documenting every detail for legal and audit purposes, and guaranteeing an unassailable Chain of Custody.' Given the specific demands of the IncMan Suite can be purchased either in a unique solution or as individual components. The IncMan Suite is delivered worldwide on a hardened, server appliance or in preconfigured, virtualized components. Training and professional services make IncMan an essential solution for information security risk management.
DFLabs also produces a well known tool, PTK Forensics (http://ptk.dflabs.com), which provides a superset of advanced functionality for the widely used forensic tool, The SleuthKit. PTK Forensics is integrated and fully compatible with the rest of the Incident Management Suite. For further details please visit our website. A preliminary (beta) video, is also available here.
DFLabs - www.dflabs.com - DFLabs is an ISO9001 certified consulting company specialized in Information Security Risk Management and Governance. Our mission is to support Information Security Strategies and guarantee Business Security. Proud of its professional experience, DFLabs provides consulting services in the following areas: Information Security Strategy and Governance, Incident Prevention and Response, Digital Forensics, Infosecurity Training, Incident Prevention and Response, e-discovery, Intrusion Prevention, Log and Vulnerability Management. We operate worldwide from our headquarters in North Italy and through our US location in Atlanta. DFLabs is part of the ESG consortium (e-discovery Solutions Group).
IT Security Incident, Digital Evidence Management e ITIL Support, para uma nova solução integrada que soluciona os problemas de gestão dos incidentes de segurança computacional.
Milano, Italia, Fevereiro, 15 - A empresa DFLabs, líder na Europa de Information Security Risk Management, tem o prazer de anunciar o lançamento oficial de IncMan Suite, solução que permite que qualquer tipo de incidente de segurança da informação seja gerido em uma única estrutura, incluindo cyber fraudes. IncMan Suite é capaz de controlar e gerenciar todo o ciclo de gestão de incidentes, desde o troubleshooting, a análise do artifact, à quantificação dos danos sofridos enfim atè a gestão da prova digital.
DFLabs IncMan Suite é composto por três módulos que podem operar tanto de forma independente quanto de forma integrada. Na sua versão completa, IncMan Suite, é constituída por: Digital Investigation Manager (D.IM.) IncMan e ITIL Framework Support. O componente D.I.M. permite catalogar e gerenciar todas as relevâncias relacionadas com um incidente em termos de: lista dos assets envolvidos; duplicação forense de suportes de memorização/ armazenamento; catalogação fotográfica; produção da respectiva documentação; relatórios de auditoria; fluxo de trabalho conforme com a lei; interação com as autoridades. Todos os processos de Investigação Forense, agora exigidos por lei nas grandes e médias organizações, encontram em DIM uma ferramenta de apoio útil, que assegura de cumprir os procedimentos padrões e igualmente de salvar em um único repositório todas as informações coletadas para o case management.
O módulo IncMan é o componente ideal para a catalogação de todos os incidentes de segurança, no respeito das normas, como por exemplo IODEF, tanto em seus primeiros estágios de detecção e contenção, quanto no encerramento e na criação de relatórios.
Enfim, o suporte framework ITIL, permite o gerenciamento centralizado de todo o sistema de chamadas e de tickets do help desk da infra-estrutura e fornece notificações em tempo real sobre a gestão dos incidentes de segurança em andamento.
O acesso ao console IncMan Suite, que ocorre em modo perfilizado ou seja cada usuário com o proprio perfil de acesso, contém um dashboard de controle e permite a gestão simultânea do incidente por todos os usuários, incluindo os CSIRT (Computer Security Incident Response Team) empresariais. De fato, para cada componente da equipe são atribuídos privilégios específicos e atividades que podem ser controladas de forma centralizada. Desta maneira, mensagens, tickets, tasks operacionais, cálculos dos prejuìzos, aspectos jurídicos e da segurança, são tratados minuciosamente.
"Estamos muito satisfeitos com o trabalho realizado na criação do IncMan Suite", diz o Diretor e fundador da impresa Dario Forte. "Com IncMan, os Chief Security Officers, Compliance, Audit, IT poderão gerenciar seus próprios incidentes com extrema simplicidade, permitindo uma quantificação exata dos respectivos custos, controlando todos os aspectos com fins legais e de audit, assegurando a maior fidelidade para a Chain of Custody e o cumprimento dos regulamentos e normas internacionais de Incident Management e Computer forensics. Com IncMan Suite as necessidades de monitoramento de transações feitas no setor de incident e forensics são totalmente satisfatórias."
A Suite IncMan será vendida mundialmente, disponível como solução única ou com os três componentes individuais, de acordo com as necessidades específicas dos clientes. O produto será comercializado sob a forma de appliance hardware ou mesmo como máquina/ambiente virtual pré-configurado. Treinamento e serviços profissionais tornam IncMan Suite uma solução essencial para a information security risk management.
Sobre a DFLABS
DFLabs é uma empresa de consultoria certificada ISO9001, especializada em Information Security Risk Management e Governance. Nossa missão é: apoiar as
estratégias de segurança da informação e garantir o Business Security. Graças à sua experiência profissional, DFLabs fornece serviços de consultoria
nas seguintes áreas: : Information Security Strategy Incident Prevention and Response, Digital Forensics, e-discovery, Infosecurity Training, Intrusion
Prevention, Log and Vulnerability Management. Nossos escritórios estão localizados no norte da Itália mas os nossos funcionários trabalham em todo o
mundo.
Contato:
Gabrielli Bermudes,
DFLabs Assistant
DFLabs srl
Tel: +39 0373-83196 / +39 0373-223716
E-mail: info@dflabs.com
Website: www.dflabs.com
Atlanta, Geórgia 28 de Janeiro 2010 — A empresa DFLabs, desenvolvedora líder na Europa de soluções Business Security e Investigação Digital para entidades governamentais e grandes empresas, inaugurou sua nova sede em Atlanta, Geórgia, ampliando sua presença nos Estados Unidos, diante do crescimento da demanda na América do Norte. Trabalhar com agencias federais e sociedades de todo o mundo, inclusive nos Estados Unidos, determinou o aumento do interesse de seus produtos e serviços. Este novo escritório será responsável pelo marketing, vendas e serviços, pela gestão de uma rede de revendedores e irá reforçar as relações já existentes na América do Norte.
A Suite IncMan, produto de destaque da DFLabs, gerencia o volume de dados gerados por um ou mais incidentes de segurança. Esta informação é organizada e estruturada hierarquicamente com base nas diretrizes IETF IODEF (Incident Object Description and Exchange Format), RFC 5070. A adesão a este standard garante à Suite IncMan uma posição única a nível internacional, como se adapta perfeitamente ao crescente pedido de condivisão de informações inter-governamentais.
"Com um aumento acentuado do numero de incidentes de segurança, os governos e as empresas reconhecem a necessidade crucial de instituir um sòlido plano de resposta e de combate ão avanço das ameaças virtuais, preservando os dados e documentando cada detalhe" diz o Diretor e fundador da impresa Dario Forte. "Neste momento nosso produto Suite IncMan permite que estas entidades possam modelar o seu processo de resposta e demonstrar os elementos de prova recolhidos oferecendo uma clara chain of custody."
A Suite IncMan, também irá auxiliar as empresas e organizações a se adequarem às normas igentes. Regulamentações como FISMA Federal Information Security Management Act, HIPAA e Sarbanes Oaxley (só para citar alguns) requerem o rastreamento dos incidentes de segurança. DFLabs tem ma experiência internacional de milhares de terabytes de dados dos incidentes acompanhados nos últimos 3 anos. A Suite IncMan é o resultado dessa experiência. DFLabs também é reconhecida como a pioneira do Forensic PTK que amplia o respeitado produto forense Sleuthkit. PTK extende a funcionalidade do Sleuthkit agindo como uma interface gráfica avançada (GUI) fornecendo um ambiente de investigações e um motor de anàlise multiuser garantindo recursos avançados tais como a indexação de todos os resultados em um banco de dados SQL. Esta ferramenta free add-on (que também está disponível como um appliance hardware ou na versão virtual) pode ser baixada a partir de vários websites, que oferecem ferramentas forenses open source como o produto Sleuthkit.
Sobre DFLabs
DFLabs www.dflabs.com - - DFLabs é uma empresa de consultoria certificada ISO9001 fundada por Dario Forte, CISM, CFE, especializada em Information Security Risk Management. Nossa missão é: apoiar o Supporting Information Security Strategies Guaranteeing Business Security. Graças à sua experiência profissional, DFLabs fornece serviços de consultoria nas seguintes áreas: : Information Security Strategy and Governance, Incident Prevention and Response, Digital Forensics, Infosecurity Training, Intrusion Prevention, Log and Vulnerability Management and Research and Development. A empresa também é especializada em Digital Incidente Response e in Forense software para entidades governamentais e empresariais. Embora seja italiana, os seus sistemas são todos escritos em Inglês e contem as impostações Unicode apropriadas para a tradução em todos os idiomas.
Para pedir ulteriores informações entrar em contacto com:
DFLabs, América do Norte
1205 Johnson Ferry Road
Suite 136-117
Marietta, GA 30068
Scott Frandsen and David Watkins
Telefone: +1 (404) 585-0755
sales_usa@dflabs.com
website: www.dflabs.com
IT Security Incident, Digital Evidence Management si ITIL Support, o noua solutie pentru rezolvarea problemelor legate de gestionarea incidentelo IT
DFLabs, numarul unu în Europa în gestionarea riscului informatic (Information Security Risk Management), are placerea sa anunte lansarea oficiala a 'IncMan Suite', solutia care permite gestionarea într-un cadru unic, a tuturor tipurilor de incidente informatice, inclusiv cele de tipul 'cyberfraud'. IncMan Suite poate controla întregul ciclu de gestionare a incidentului, de la faza de 'troubleshooting' si 'artifact analysis', la cuantificarea daunelor si gestionarea probelor digitale.
'IncMan Suite' se împarte în trei componente, care functioneaza atât în mod independent cât si integral. În versiunea sa completa, IncMan Suite, se compune din: Digital Investigation Manager (D.IM.), IncMan si ITIL Framework Support. Componenta D.I.M. va permite catalogarea si gestionarea tuturor aspectelor legate de un incident în termeni de: lista a bunurilor implicate, dublarea suporturilor de memorie, cataloage fotografice, elaborarea documentatiei, rapoarte de audit, etc. Toate procesele de 'Forensic Investigation', impuse prin lege organizatiilor mari si mijlocii, identifica în D.I.M un instrument de sprijin care sa asigure conformitatea cu procedurile standard si salvarea într-un unic 'repository' a tuturor informatiilor necesare în procesul de gestionare a unui caz.
'IncMan' reprezinta componenta ideala pentru catalogarea oricarui incident de securitate informatica, asigurând conformitatea cu standarde precum IODEF, din momentul detectarii pâna la izolarea incidentului si generarea de rapoarte.
'ITIL Support Framework', în schimb, permite gestionarea centralizata de catre personalul 'helpdesk' a tuturor apelurilor si 'ticket'-urilor, prin furnizarea, în cel mai scurt timp posibil, de notificari cu privire la gestionarea incidentelor IT.
Printre caracteristicile cele mai importante se numara: acordarea accesului în functie de profil, o 'dashboard' de control ce permite gestionarea simultana a incidentelor de catre cei implicati, inclusiv de catre echipa CSIRT (Computer Security Response Team). Fiecarui membru al echipei îi este atribuit privilegii specifice si activitati care pot fi controlate în mod centralizat. În acest fel, mesajele, 'ticket'-urile, sarcinile, cuantificarea daunelor, precum si aspectele juridice, sunt tratate în mod detaliat.
"Suntem foarte multumiti de realizarea acestiprodus, IncMan Suite", a spus Dario Forte, CEO si fondator al DFLabs. "Cu ajutorul solutiei IncMan Suite, Chief Executive Officer, revizori, echipa IT pot gestiona propriile incidente într-o maniera extrem de simpla, care permite cuantificarea exacta a costurilor, asigurând 'the Chain of Custody' si conformitatea cu reglementarile si standardele internationale în materie de 'Incident Management' si 'Computer Forensics'. 'IncMan Suite' raspunde nevoii de urmarire a operatiilor efectuate în domeniul 'forensics'.
'IncMan Suite' este disponibil pe piata internationala în format unic sau cu cele trei componente individuale, în functie de nevoile specifice ale clientilor. 'IncMan Suite' se prezinta sub forma de 'hardware appliance' sau software în ambient virtual preconfigurat. 'Training'-ul si serviciile profesionale fac din 'IncMan Suite' o solutie esentiala pentru gestionarea riscurilor si a securitatii IT.
Despre DFLabs
DFLabs este o companie de consultanta certificata ISO9001 specializata în 'Informaton Security Risk Management'. Misiunea noastra este de a sprijini
strategiile de 'Information Security' si de a asigura ceea ce denumim 'Business Security'. Datorita experientei profesionale, DFLabs ofera servicii
de consultanta în urmatoarele domenii: 'Information Security Strategy', 'Incident Prevention and Response', 'Digital Forensics', 'e-discovery',
'Infosecurity Training', 'Intrusion Prevention', 'Log and Vulnerability Management'. Sediul firmei este situat în Nordul Italiei, dar personalul
nostru opereaza în toata lumea.
Media contact:
Irina Cernat - Gabi Bermudes,
DFLabs Assistant
DFLabs srl
Tel: +39 0373-83196 / +39 0373-223716
E-mail: info@dflabs.com
Website: www.dflabs.com
Atlanta, Georgia 28 ianuarie 2009 - DFLabs, lider în Europa în Business Security si Digital Investigation, solutii dezvoltate pentru a functiona atât la nivelul organizatiilor guvernamentale cât si în cadrul marilor firme, a deschis un nou sediu în Atlanta, Georgia. Prezenta în SUA are ca rezultat valorificarea si cresterea cererii în Nord America. Colaborarea cu agentii federale si companii din toata lumea, inclusiv Statele Unite, este cauza interesului marit pentru produsele si serviciile pe care le ofera. Noul sediu va fi responsabil de marketing, vânzari si servicii, precum si de gestionarea retelei de distribuitori si consolidarea relatiilor dezvoltate pe teritoriul Americii de Nord.
IncMan Suite, ce reprezinta "piatra de temelie" al companiei DFLabs, gestioneaza volumul de date generate în urma analizei incidentului de securitate IT. Aceste informatii sunt organizate si structurate ierarhic conform standardului IETF IODEF (Incident Object Description and Exchange Format), RFC 5070. Acest standard ofera produsului o pozitie unica pe plan international, întrucât raspunde accentului deosebit care se pune astazi pe schimbul de informatii la nivel guvernamental.
"Datorita cresterii semnificative a numarului de incidente de securitate IT, atât guvernele cât si marile companii recunosc necesitatea cruciala de a dezvolta un plan solid de respingere a atacurilor pastrând integritatea datelor si documentând fiecare detaliu" explica Dario Forte, CEO si fondator al companiei DFLabs. "IncMan ajuta la modelarea procesului de monitorare, prevenire, detectare si raspuns, demonstrând dovezile adunate printr-un chain of custody foarte detaliat". IncMan Suite va ajuta, de asemenea, companiile în procesul de compliance. Regulamente precum FISMA Federal Information Security Management Act, HIPAA e Sarbanes Oaxley (pentru a mentiona doar câteva) impun monitorarea incidentului de securitate. DFLabs detine o experienta internationala de mii de terabytes de date relative la incidentele gestionate în ultimii trei ani. Incman suite este rezultatul acestei vaste experiente.
DFLabs este de asemenea renumita pentru produsul PTK Forensic care completeaza functiile respectatului instrument, Sleuthkit. PTK extinde functionalitatea acestuia actionând ca o interfata grafica (GUI) oferind un motor de examinare precum si functia de indexare a rezultatelor într-o baza de date SQL. Acest add-on gratis, al carui download se poate face de pe diferite website -uri care ofera instrumente forensic open source precum Sleuthkit, este disponibil atât în format virtual cât si sub forma de appliance hardware.
Despre DFLabs
DFLabs - www.dflabs.com DFLabs este o companie de consultanta certificata ISO 9001 creata de catre Dario Forte, CISM, CFE si specializata în
Information Security Risk Management. Misiunea noastra este de a dezvolta strategii de Information Security si de a garanta Business Security. Datorita
experientei profesionale, DFLabs ofera servicii de consultanta în urmatoarele domenii: Information Security Strategy and Governance, Incident Prevention
and Response, Digital Forensics, Infosecurity Training, Intrusion Prevention, Log and Vulnerability Management and Research and Development. Compania
noastra este specializata în Digital Incident Response si Forensic Software pentru organizatii guvernamentale si marile companii. Desi fondata în
Italia, sistemele noastre sunt scrise în engleza si contin bazele Unicode pentru a fi traduse în toate limbile. Pentru informatii va rugam sa contactati:
DFLabs, América do Norte
1205 Johnson Ferry Road
Suite 136-117
Marietta, GA 30068
Scott Frandsen and David Watkins
Telefone: +1 (404) 585-0755
sales_usa@dflabs.com
website: www.dflabs.com
PTK Forensics, the advanced Computer Forensic Software created by DFLabs, has an updated website. We Just released two new versions of it, under the PTK Forensics full name. Available both in SW and HW appliance version, PTK Forensics is now one of the most effective alternatives to Encase and FTK.
More infos on our website.
Dario Forte, founder and CEO Of DFLabs, will give his contribution to the Henk C.A. van Tilborg, Sushil Jajodia (Eds.)Encyclopedia of Cryptography and Security (2nd Ed.), which will be published within 2010 for Springer.
Forte's contribution will be on web security audit. The Springer's Encyclopedia of Cryptography and Security, is one of the most respected information security publication worldwide, edited by Springer, a leader scientific publisher.
The SANS Computer Forensics Blog has recently published an article related to the appliance version of the PTK Forensics regarding the new Hash Set analysis feature. This new important feature allows investigators to manage Hashkeeper archives or to create customized hash libraries. The year 2010 will bring important news to the commercial and free version of PTK.
DFLabs announces the release of the Incident Management Suite, a tool that enables the management, in a unique solution, of every kind of information security incidents. DFLabs IncMan Suite supports the entire incident management process from troubleshooting to security, including digital forensics and case management. The IncMan Suite comprises three modules that can operate autonomously or integrated in order to obtain a complete incident management centralized solution.
More info can be found here
eDiscovery Solutions Group expands its international eDiscovery and Governance, Risk and Compliance (GRC) capabilities and reach through partnership with leading European-based information security risk management and governance provider.
New York, New York (November 3, 2009) - eDiscovery Solutions Group, an emerging leader in providing comprehensive eDiscovery and Governance, Risk and Compliance (GRC) consulting, services and technology worldwide announced today that it has entered into a partnership with DFLabs, a leading European-based information security risk management and governance provider.
Under the terms of the partnership, DFLabs will provide a wide range of Governance, Risk and Compliance (GRC) and eDiscovery consulting, services and technology for eDiscovery Solutions Group clients throughout the world. In addition, other partners from the eDiscovery Solutions Group consortium will enable DFLabs to expand its GRC and eDiscovery offering with additional eDiscovery consulting, services and technology with support in most of the major metropolitan markets in the US, Canada, Europe and the Middle and Far East.
“With the convergence of Governance, Risk and Compliance (GRC) and eDiscovery, our Forbes Global 2000 client base is demanding a more integrated single source solution that can assist with all of their information management requirements from assessing general risk and developing enterprise wide strategies to supporting the requirements of litigation” states Charles Skamser, President and CEO of eDiscovery Solutions Group. “As such, eDiscovery Solutions Group is pleased to announce a partner with the wide range of skills and experience within the Governance, Risk and Compliance (GRC) and eDiscovery markets along with the international reach and high level of integrity as DFLabs,” added Mr. Skamser.
Found in 2002 in Milano, Italy, DFLabs provides a wide range of consulting service throughout the world including information security strategy, incident/fraud prevention and response, digital forensics, eDiscovery, litigation support, infosecurity training, intrusion prevention and log and vulnerability management. In addition, DFLabs has extensive expertise and experience developing and supporting governance policies and tracking compliance with such standards as Sarbanes Oxley, FISMA, HIPAA, 231/2001, L. 262, CONSOB and MIFID.
DFLabs recently opened an additional facility in Crema (Cr), Italy called IR@DFLabs, completely dedicated to incident prevention and response, digital investigations and R&D. The facility is equipped with the latest generation technologies, including code breakers and digital evidence management capabilities. IR@DFLabs is the main development unit for D.I.M., DFLabs Digital Investigation Management Tool, DFLog , the companies Log Management Framework and IncMan , the companies Incident Management solution. DFLabs is also the developer of PTK a free advanced interface for Sleuthkit.
Dario Forte, the founder and CEO of DFLabs has more than fifteen year of experience in information security risk management, governance and related fields. As a former Italian Financial Police Officer specializing in electronic crime enforcement for the drug, organized crime and anti-terrorism units, Mr. Forte is currently on the faculty at Milano University at Crema teaching Incident Response and Digital Forensics, is the Editorial Director of ICT Security Magazine Italy. Mr. Forte is a Certified Information Security Manager (CISM), a Certified Fraud Examiner (CFE), Certified in the Governance of Enterprise IT® (CGEIT®), Certified Digital Evidence Collection Specialist (IACIS), has completed the Advanced Incident Handling for Technical Staff (Carnegie Mellon CERT) and has multiple military and government specializations.
“We are very pleased to be joining the eDiscovery Solutions Group consortium, “stated Dario Forte, CEO for DFLabs. “Our team of highly motivated professionals has the experience and expertise to provide the eDiscovery Solutions Group consortium and their clients throughout the world with the high level of support that they expect for assessing general risk and developing enterprise wide strategies to supporting the requirements of litigation. In addition, we believe that being a member of the eDiscovery Solutions Group consortium will enable us to expand our international geographic reach and extend additional eDiscovery and GRC consulting, services and technology to our existing client base, ” added Mr. Forte.
About DFLabs
DFLabs is leading European-based information security risk management and governance provider specializing in information security strategy, incident/fraud prevention and response, digital forensics, eDiscovery, litigation support, infosecurity training, intrusion prevention and log and vulnerability management.
About the Forbes Global 2000
The Forbes Global 2000 is an annual ranking of the top 2000 public companies in the world by Forbes magazine. The ranking is based on a mix of four metrics: Sales , Profit , Assets and Market value. The list has been published since 2003. For more information on the Forbes Global 2000 list for 2009.
About eDiscovery Solutions Group
eDiscovery Solutions Group is an international consortium of leading independent eDiscovery consultants, eDiscovery consulting firms, regional litigation service providers and best-in-class eDiscovery technology companies that have come together to provide all of the services, consulting and technology necessary to support the entire eDiscovery lifecycle for the legal departments of corporations, the IT departments of corporations that need to support eDiscovery requirements and litigation centric law firms.
With a growing consortium of partners worldwide, eDiscovery Solutions Group offers a broad array of eDiscovery consulting, services and technology along with project management to support the entire eDiscovery lifecycle. Following the eDiscovery processing paradigm of the Electronic Discovery Reference Model (EDRM), eDiscovery Solutions Group has developed an eDiscovery best practices framework that includes consulting, collection, analysis, processing, production, review and presentation.
Within this framework, the eDiscovery Solutions Group can deliver data retention policy, development, data archiving, eSecurity, eCompliance, eDiscovery readiness, strategic planning, implementation support, paper and ESI collection, investigations, expert testimony, data recovery, computer forensics, early case assessment, data analysis, data redundancy management, conceptual search, de-dupe, near de-dupe, scanning, copying, coding, language translation, EDD, TIFF conversion, hosting, on-site, on-shore and off-shore review, legal process outsourcing (LPO), courtroom graphics and presentations, tool training, systems integration and custom solutions. For more information about eDiscovery Solutions Group.
eDiscovery Solutions Group Business Networking Links
Follow the eDiscovery Solutions Group on Twitter.
Join the eDiscovery Solutions Group on Linkedin.
Join the eDiscovery Solutions Group on Facebook.
Follow the eDiscovery Solutions Group Blog.
Press Contact:
Director of Marketing
eDiscovery Solutions Group
PO Box 2299
Eagle, Idaho 83616
Main: 866-611-7522
email: sales@ediscoverysolutionsgroup.com
Web: www.ediscoverysolutionsgroup.com.
