AccessData® Enterprise takes network-enabled digital investigations to the next level. Built on our industry-standard, court-validated Forensic Toolkit® technology, AD Enterprise delivers state-of-the-art incident response capabilities, deep dive analysis of both volatile and static data, as well as superior threat detection capabilities - all within an easy-to-use interface. A role-based permission system, an intuitive incident response console, secure batch remediation capabilities, unsurpassed searching and filtering, and comprehensive logging and reporting are just a few of the reasons AD Enterprise is quickly being adopted by Fortune 500 companies.

 Product Features

Ease of Use, Stability and Process-oriented Workflow

• Conduct secure investigations on multiple machines across your network from a central location.
• Web-based management server enforces granular role-based security.
• Automated batch acquisition of devices and RAM to streamline large multi-node evidence collections.
• Rich, wizard-driven reporting on static and volatile data, making it easy to share information and generate meaningful reports.
• Agent Resource and Bandwidth Throttling allows you to define low, medium and high to determine how much CPU and bandwidth is used during investigative operations, where low is super stealth and high is for speed.
• Users are not confined to proprietary technology: AD Enterprise supports EnCase evidence files, AD evidence files, DD and more. In addition, there is no need to learn a proprietary scripting language. All functionality is in the GUI.
• Oracle database backend allows you to handle massive data sets, delivering case management, metadata storage and robust data manipulation capabilities.
• True Auto Save/Recovery functionality in the event of a failure.
• Forensically sound and court-validated technology.

The Most Comprehensive and Efficient Investigation of Data across the Enterprise

• Active directory integration enables quick identification and selection of nodes.
• The industry’s first one-click acquisition of hard drives, RAM and volatile data.
• Thorough data capture includes individual files, deleted files, unallocated space and logical volumes.
• Easy-to-use data processing wizard that automatically categorizes, indexes and exposes data.
• Search and collect from network shares.
• Market-leading decryption, password recovery and cracking technology.

Powerful Incident Response, Including Deep Analysis of All Live Processes

• Right click process kill during an IR investigation
• GUI-integrated, secure remediation
• Easy-to-use incident response console for rapid review and analysis of key volatile data elements, such as process, driver, port, user, DLL, handles and more.
• View static and volatile data within the same interface with one click

AD Enterprise Brochure >
Introduction to AccessData Enterprise >