Product review: Paraben's P2 Enterprise Shuttle - Information Security Magazine - Page 1

Product review: Paraben's P2 Enterprise Shuttle

FORENSICS


P2 Enterprise Shuttle
REVIEWED BY BRENT HUSTON

Paraben

    Requires Free Membership to View

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.


Price: $6,995

Paraben's P2 Enterprise Shuttle is a remote digital forensic suite, allowing you to remotely conduct undetected forensic tests on Windows machines in your network without taking the machines offline.

This can be useful to acquire the data without raising suspicion of the target. It may also be used to monitor infected systems in real time.


InstallationC+  
Installation was pretty straightforward--a CD guide walks you through it--but we did encounter some issues after the installation. We were unable to get the proxy functioning due to a misconfiguration.

The installation automatically filled in the IP address to be used by the proxy and server with the hostname, which did not seem to work. The proxy would not start and did not really give a reason. We corrected the issue by editing the config files and changing the hostname to be the actual IP address.

The client agents can be installed directly or through the Captain, which controls agents and acquires and analyzes data from systems.

The latter allows you to place the agent without alerting the user or install agents on multiple machines.

This was first published in November 2007

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.