Digital Forensics and Incident Response License PacksImprove your services with a license pack that fits your needs
DFIR in Focus
After a purchase, you can issue a license precisely when it is needed using our new customer portal. The validity period of each license begins at the issue date.
The unrestricted license gives you the necessary flexibility to act quickly without knowing the hostnames of the systems to be analyzed.
The five host based licenses are meant for you and your team or the customer’s administrators to do some testing before you issue the license that runs for 30 days counting from the day of the creation.
The SOC Toolkit License Pack boosts the effectivity of your Security Operation Center by providing an additional check that fits perfectly in every host-related playbook.
Scans with our products cover all the cases which do not provide enough evidence to shut off the system and take a forensic image and at the same time are too suspicious to just check them off.
With the purchase of this pack, you’ll receive 100 licenses with a validity of 1 day that can be issued in the customer portal precisely when you need them.
The Forensic Lab license is perfect for a forensic workstation that processes many images over the course of a year.
It works only on the workstation for which it was issued and allows you to process as many mounted images as needed, also simultaneously.
Customers also use it to run THOR in “dropzone” mode, in which THOR monitors an input directory for new contents, scans them and reports suspicious or malicious files. Supports multi-threading. Price per year.
Host based Endpoint
Professional Analysis Support
Our incident response professionals and security analysts have processed the reports of thousands of systems over the last few years. If you want us to help you with the analysis, add one or more days of support to your request.