Wetstone technologies inc
Products
WetStone Technologies sells products and training for computer forensics.
Gargoyle Investigator™ Forensic Pro Edition
Gargoyle Investigator Forensic Pro Edition is our most advanced malware detection software package for rapid in depth forensic investigations. It is designed for forensic laboratories, law enforcement, field investigators and advanced private investigators. Gargoyle performs a quick search for malicious software programs and provides significant clues regarding activities, motives and the intent of the suspect or potential suspects. Gargoyle goes beyond the standard virus protection software with our extensive collection of "hostile" programs that typical virus protection software cannot detect. This tool was developed to shorten investigation time and provide accurate and detailed forensic evidence reports to assist investigators in the malware investigation process.
Key Features
Ability to conduct scans on a stand-alone system or network resource,20 datasets containing thousands of types of malicious software, Dataset Creator™ - ability to create or extend datasets, Interoperable with popular forensic tools such as EnCase™ and FTK™, 32-Bit and 64-Bit drive mounting and management integration, Detailed forensic evidence reports with secure source timestamping
System Recommendations
Microsoft Windows® 2000, XP, Vista, 130 MB free disk space, 256 MB RAM, Pentium® III 1GHz processor
License
Single user license, To Simultaneously scan suspects up to 100 systems please view Gargoyle Investigator™ Enterprise Module.
LiveDiscover™ Forensic Edition
LiveDiscover Forensic Edition (FE) is the premier tool for rapid full distributed network assessment and mapping, which is a critical first step in any digital investigation. Designed for forensic investigators, LiveDiscover FE rapidly scans a range of IP addresses and generates comprehensive forensic reports including easy to view graphs on each located device within the specified network. With the case management features, investigators can tailor reports and case details,making evidence court ready. Built-in customization allows for the creation of modified vulnerability scripts making LiveDiscover FE field extensible.
Key Features
Live forensic network discovery, Live forensic vulnerability assessment, Automatically identify operating systems including Windows, Unix, Linux, Mac, VMS, Novell, and Sunsystems, Remote detection of system status including running services, attached devices, and open shares, Forensically map communication devices, printers and more, Forensic detailed report generation
System Recommendations
Microsoft Windows® 2000, XP, Vista, 20 MB free disk space, 256 MB RAM, Pentium® III 1GHz processor
License
Single user license, Site licenses are available upon request
Stego Suite™
Stego Suite is comprised of four specialized products: Stego Hunter™, Stego Watch™, Stego Analyst™, and Stego Break™. This comprehensive suite of applications is designed to quickly identify, examine and analyze digital images and/or audio files for the presence of hidden information or covert communication channels. Detecting the presence of steganography is a tedious process; without advanced tools it is close to impossible to detect. Using Stego Suite investigators are able to utilize the latest algorithms for flagging suspicious files through a blind anomaly-based approach, examine files with image filters, analyze DCT coefficient histograms, and track palette manipulation with close color pairs, shortening investigation time drastically and allowing investigators to work specifically within the four tools provided in the suite.
Key Features
Rapid identification of known steganography programs, Flag suspicious files through blind anomaly-based approach, State-of-the-art image and audio analyzer, Crack and extract payloads from carrier, Court ready investigator reports, Scan audio files, JPG, BMP, GIF, PNG and more
System Recommendations
Microsoft Windows® 98 or higher, 100 MB free disk space, 512 MB RAM, Pentium® III 1GHz processor
License
Single user license allows for installation of entire suite, Site licenses are available upon request
Training courses
- Advanced Steganography Demystifying Steganography Investigation
- Hacking BootCamp: Exploits and Live Incident Investigation
- Introduction to Steganography: Steganography and Data Exfiltration
- The Art of Keylogging
- Zombies and Botnets: Setup-Investigate-Shutdown
Advanced Steganography Demystifying Steganography Investigation
During this 2 day advanced class, students will participate in hands on experiments with stego'd images, multimedia files, advanced network protocols and Steganographic file systems. Detailed analytical and jamming methods will be utilized to both discover and disrupt Steganographic operations. Analysis of Steganographic file systems, streaming steganography and Voice Over Internet Protocol (VOIP) based steganography will be covered. A host of both open source and proprietary technologies will be utilized during this class.
Steganography is Evolving
The art of analyzing steganography within images, multimedia and in network protocols is considered a black art. As criminals communicate and conceal vital information in new Steganographic file systems, voice over internet protocol (VOIP) streams and in a host of multimedia carriers, it is vital and urgent that a cadre of trained experts exist to counter this threat. A deep understanding and analysis of images, multimedia files and network protocols along with clear understanding of the known methods of data hiding are essential in order to participate in this analysis.
Who Should Attend
- Forensic Investigators
- Local, state and federal law enforcement
- Private investigators
- IT security professionals
Our trainers take you inside the minds of today's criminals and students completing the class will be able to execute a full investigation in the respective discipline. Participants proficiency in the above skills will be tested with certification exams.
Hacking BootCamp: Exploits and Live Incident Investigation
WetStone has engineered a three-day interactive lab environment that allows each student to experience real investigative scenarios in a cyber safe environment. WetStone's multi-pronged approach to this bootcamp allows each student to utilize the latest tools and technologies used by today's criminals, and to practice the requisite live approach to investigation. This learning environment is the most effective approach to acquiring deep knowledge regarding both the latest threats and to practice in live investigation techniques and methodologies.
Classroom Environment
WetStone has created a unique virtualized cyber-safe environment where investigator and IT professionals can use and experiment with some of the best ...
- Botnet
- Rootkit
- Wireless Cracking
- Live Triage
- Memory Analysis
- Live Triage
- Memory Analysis
- Log Analysis
- Process Port Linkage
Our trainers take you inside the minds of today's criminals and students completing the class will be able to execute a full investigation in the respective discipline. Participants proficiency in the above skills will be tested with certification exams.
Introduction to Steganography: Steganography and Data Exfiltration
This virtual one-day class will introduce you to the latest methods,techniques and threats posed by steganography. Students will learn how steganography has evolved, where it is going and how it is being used by criminals and terrorist organizations. Learn about the latest techniques to detect, shunt, disrupt and destroy steganography communications. Identify those using steganography and stop the leak of vital information from your organization.
Steganography is Global Threat
Steganography is capable of concealing the mere existence of incriminating information and/or covert communications. Steganography weapons are easy to use, and are readily available to our adversaries.
When Steganogpraphy is used in conjunction with the internet, it becomes a globally effective tool for command control communication and intelligence.
Criminals are armed with the ability to:
- Conceal incriminating information
- Covertly communicate with accomplices
- Innocuously share large amounts of potentially dangerous information
Who Should Attend?
- Forensic Investigators
- Local, state and federal law enforcement
- Private investigators
- IT security professionals
- Security auditors
Our trainers take you inside the minds of today's criminals and students completing the class will be able to execute a full investigation in the respective discipline. Participants proficiency in the above skills will be tested with certification exams.
The Art of Keylogging
WetStone has created a unique virtualized cyber-safe environment where investigators and information technology professionals can experiment with key logging technologies, including both software based and hardware based. Beyond the offensive use of these tools, investigators will discover how to investigate keyloggers with varied sophistication levels. To truly get into the mind of a cyber criminal an investigator must know what they are looking for, and then deeply understand how the tools they uncover work. Establishing this can mean the difference between pulling the plug on a memory resident keyloggers, and losing all traces of evidence, or uncovering the activity needed for prosecution.
Is Someone Looking Over Your Shoulder?
Desktops without keyboards, and laptops without keys are like baseball without a bat. It is impossible to take away keyboards from computers and still be efficient and functional. The question that then surfaces is, how do we secure them? Keyboards are under attack from software and hardware based tools designed to steal the content typed on the keys. Whether infected at home or at work, keyloggers are responsible for massive amounts of identity theft and corporate leakage of data.
Who Should Attend?
- Forensic Investigators
- Local, state and federal law enforcement
- Private investigators
- IT security professionals
- Security auditors
Our trainers take you inside the minds of today's criminals and students completing the class will be able to execute a full investigation in the respective discipline. Participants proficiency in the above skills will be tested with certification exams.
Zombies and Botnets: Setup-Investigate-Shutdown
WetStone has created this one-day advanced module to their Hacking Bootcamp focusing exclusively on Zombies and Botnets. Students will have unique access to our “hands-on” interactive learning environment. Students will work together to establish a complex Botnet environment and practice investigative methods/techniques to collect criminal information. Each student will learn how to shutdown and isolate Botnet operators and individual Zombies in order to limit or preempt the damage they can cause.
Sinister Cyber Weapons
One of the most sinister cyber weapons to arrive on the scene in recent years are Zombies and their associated Botnets.
Today's cyber investigators must possess in depth working knowledge of their internals. To accomplish this you must know how to setup, investigate, and shutdown these weapons.
Botnets are continuing to be a global issue. These types of malicious software are penetrating our personal, corporate and government systems. Statistics are showing that up to one quarter of all computers that are connected to the internet have become a part of a Botnet.
Skills Learned
Upon completion of the course, students will have gained advanced knowledge in the fundamentals of Zombies and Botnets
- Offensive planning of Zombies and Botnets
- Investigative considerations when faced with these weapons
- Learn the art of isolation and termination of Botnets.
Our trainers take you inside the minds of today's criminals and students completing the class will be able to execute a full investigation in the respective discipline. Participants proficiency in the above skills will be tested with certification exams.