Automated reconstruction and visual replay of network activity for quick and decisive investigation and response to security incidents

nGenius® Forensic Intelligence is an analysis module for nGenius Service Assurance Solution that accelerates and simplifies security-related forensic analysis. The specialized analysis module delivers automated, accurate, and contextual session reconstruction and visual replay with simple point-and-click analysis. Powerful filtering and search capabilities enable flexible and focused analysis. nGenius Forensic Intelligence enables a faster, more effective and collaborative security investigation -- resulting in dramatically faster time to knowledge to support security-related incident response.

The self-contained analysis module automates the reconstruction and replay of hundreds of IP-based services and applications. Leveraging the market-leading nGenius InfiniStream® appliances, the solution extends security forensic analysis capability throughout the IT operational domain to meet the needs of network and security operations teams.

MSN Visual Replay » View Screenshot

CNN Visual Replay » View Screenshot

FileFactory Visual Replay » View Screenshot

nGenius® Forensic Intelligence delivers comprehensive network forensic analysis with unprecedented visibility and context into network traffic for security analysis. nGenius Forensic Intelligence quickly reconstructs network traffic from multiple nGenius InfiniStream® appliances replaying the targeted activity exactly as it occurred.

nGenius Forensic Intelligence provides the following capabilities:

• Automated session reconstruction with point-and-click visualization and replay
• Chronologically accurate representation of targeted network activity providing clear context
• Reconstruction and replay for most common applications and protocols including social media, email, file transfers, chat, voice and video
• Powerful and flexible analysis capabilities with filtering and search capability on targeted network activity
• All reconstructed traffic is maintained on a secure server, maintaining data integrity
• Role-based access with standard and custom-based authentication methods
• All activities performed by administrators and analysts are logged and audited
• Filtered packet data capture from multiple nGenius InfiniStream appliances across the operational domain
• Shares same monitoring infrastructure as nGenius Service Assurance Solution
• Supports both shared and dedicated data collection models