Law enforcement agencies have to deal with an increasing amount of digital evidence. Finding efficient ways to process it and identify the important information is crucial. Trufflepig supports them with a hassle-free memory forensics solution for example in finding suspicious processes and network activity as well as decrypting encrypted objects.Learn more
A more digital economy means more cyberattacks. The time that it takes companies to respond to an incident is the deciding factor for mitigating the damage. Trufflepig helps DFIR Teams generate detailed insights fast based on a computers memory and associated data sources. The solution helps to detect and reverse engineer malware and analyze hacker activity and user misconduct.Learn more
As technology becomes more prevalent in our day-to-day lives, so does the likelihood of fraudulent behaviour disguised within the folds of seemingly endless electronic data. As a result, fraud investigations have become heavily reliant on electronically stored evidence, making memory forensics an essential part of modern-day investigations.Learn more
Its ease of use exceeds that of its competitors and is continuously improved; Nexus is compatible with your needs whether you operate a small, medium or large organisation.
It simplifies the training needed for your investigators and allows you to focus on training for other matters. We are ready to help you all the way, develop possible training for you, have technical support available, and we are open to discussions to make feature optimisations for you.
Nexus is ready to meet today's challenges; it's faster and more robust to facilitate the increasing number of memory forensics cases worldwide.
Trufflepig Forensics uses pattern redundancy to increase the robustness of the results. The data-oriented C++ implementation significantly speeds up the analysis. Trufflepig Forensics can be easily integrated into existing workflows. The results can be exported as JSON or similar formats.
Using automation, Nexus reduces human error and ensures more accurate information and smoothly completed tasks and processes.
The framework supports analysis on all Windows on x86_64 systems (in future OSX and Linux on x86_64) without the need of specifying hardware profiles. Results are cross-correlated with different data sources (e.g. disk images) and advanced malware detection algorithms applied. Nexus also support decrypting encrypted containers.