US-LATT PRO
US-LATT PRO performs live acquisition and triage of Microsoft® Windows systems
(XP – Windows 8). LATT provides investigators and breach response personnel with the ability to triage live evidence and perform fast and efficient on scene investigations.
32 – 128 GB FIPS 140-2 Hardware Encrypted and Access Controlled Devices
Additional external drive support
- Capture Memory
- Catalog Running Processes
- Snapshot Network Ports and Connections
- Capture Screenshots
- Identify and Image Encrypted Volumes
- Acquire Files
- Acquire Skype Actions
- Acquire Web Activity
- Acquire e-mail Activity
- Acquire User Actions
- Acquire System Event Logs
- Strong Authentication and Evidence Protection
- On Scene and Lab analysis
- All acquired data is in standard XML formats with supplied style sheets for web browsing based examination