Guidance’s EnCase software aggregates event data from various places on compromised computers in order to build a picture of what happened. Unless they completely wipe the disk, attackers always leave some traces that can be rescued, executives said.
Guidance claims its software allows companies to collect information that will stand up in court, and that allows them to comply with regulations such as Sarbanes-Oxley and SB 1386. VeriSign will use the software as the latest in its growing portfolio of managed security services.
