Security Software delivers true incident response.
Press Release Summary:
EnCase Enterprise v5 provides automated real-time incident response and near-time compromise assessment using more than 20 software tools in one enterprise product to assess more than 10,000 machines per hour. Enterprise IT teams can detect, analyze, process, and respond to large number of security events. Software automatically assesses computers to determine if something is wrong, such as unknown network connection, unauthorized or rogue process, or latest rootkit.
Original Press Release:
Corporate Security Reaches New Levels as Guidance Software Provides True Incident Response
EnCase(TM) Version 5 Sets Best Practices for Corporate Security Officers and Provides the Most Complete Security Solution in the Industry
PASADENA, Calif., Feb. 15 -- Guidance Software, Inc., the maker of EnCase(TM) software, the world's leading computer investigative software, announced today the release of its EnCase Enterprise Version 5 (V5) software. The March 2005 release of EnCase Enterprise provides automated real-time incident response (IR) and near-time compromise assessment by harnessing the power of more than 20 software tools in one enterprise product to assess more than 10,000 machines per hour. This solution approach to IR provides a standard, repeatable process consistent with Networking and Security Institute (SANS) and the National Institute of Standards and Technology (NIST) for best practices on handling computer incidents.
"Network security attacks at financial institutions doubled last year according to a recent Deloitte survey," says John Colbert, CEO, Guidance Software. "EnCase Version 5 provides a unique solution that gives an enterprise IT team the ability to detect, analyze, process and respond to a large number of security events in an automated fashion. This is a paradigm shift in network security and a sign of the growing trend to merge outdated technologies and tedious manual processes to satisfy organizations' increased expectations for security and more accurate information."
Guidance Software's best-practices approach to incident response is a "closed-loop" process that can save companies millions of dollars in direct costs and network downtime. Using our flagship technology, EnCase Enterprise automatically assesses computers to determine if something is wrong -- whether it's an unknown network connection, an unauthorized or rogue process or even the latest rootkit. This unique capability captures data about the incident in real time from the host's perspective -- including "volatile" or live data. IT staff can catch the incident as it is happening and respond quickly to determine what if any damage has been done, how far the damage has spread, and whether it's a worm, hacker, rogue employee, or unknown threat.
EnCase does this through near-time compromise assessment. It takes a "fingerprint" of specific compromises and looks for the same identifiers on all machines enterprisewide, including those at remote offices. Once the incident has been identified, it is documented and remediated according to an organization's existing incident response practices. This revolutionary approach is the key to identifying the breath and scope of an attack and stopping it from spreading across an organization or enterprise.
"Last year the average Fortune 1000 business spent more than US$2 million defending themselves against attacks," states Colbert. "Guidance Software has built enterprise technology designed to both defend itself against attacks and actually remediate them."
As part of its automated incident response, EnCase Enterprise V5 includes the ability to detect the stealthiest rootkits. This commercial-grade capability means that EnCase Enterprise is the only solution on the market today that can identify and destroy hidden processes used by rootkits.
As the leading computer investigative technology, EnCase continues its evolution to meet the growing security needs of corporations, government and law enforcement agencies. EnCase Enterprise is also used by organizations for faster and more efficient internal investigations, including those tackling allegations of fraudulent activity or litigation discovery matters.
About Guidance Software
Guidance Software is the world leader in computer forensics and incident response solutions. Founded in 1997 and headquartered in Pasadena, Calif., Guidance Software has offices and training facilities in California, Virginia, New York and the United Kingdom. More than 14,000 corporate and government investigators depend on EnCase(R) software, while more than 3,500 investigators attend Guidance Software's forensic methodology training annually. Accepted by numerous courts and honored with eWEEK's Excellence Award and SC Magazine's Annual Award, EnCase(R) software is considered the standard forensic tool. For more information, visit Guidance Software's Web site at www.guidancesoftware.com.
CONTACT: Tamara Shetler of Guidance Software, Inc., +1-626-398-6456, or cell, +1-626-215-6143, Tamara.Shetler@guidancesoftware.com
