Gargoyle Investigator™ Forensic Pro

Please call for US Law Enforcement and Education discounts

What is Gargoyle Investigator?
Gargoyle Investigator is an invaluable software tool for digital investigations. When performing incident response, digital forensic analysis, threat management, or compliance audits, Gargoyle Investigator performs a quick search for known contraband, hostile, or 'bad' programs, and provides significant clues regarding the activities, motives and the intent of suspects or potential suspects.

Gargoyle Investigator Forensic Pro is fast and easy to use, it provides investigators with valuable information regarding the contents of a suspect's computer along with essential information about it's owner's computer use. Once identified, Gargoyle also maps the detected files to the associated cyber weapons, and classifies them into a category of malware. With the ability to identify potentially hostile or suspicious programs based on the loaded dataset, the classification of those hostile programs, and the ability to view the suspect from a new aspect, while ascertaining incriminating behaviors or methods; this becomes a core tool for your investigation.

Is Gargoyle court approved?
Gargoyle has been taken to court and used for several cases. With the easy to read HTML, timestamped reports, Gargoyle provides detailed evidence that is court ready.  Click here to read our customer testimonials.

What is malware detection?
Gargoyle quickly and easily determines whether malware is present on a system under investigation. Malware, short for malicious software, is designed to wreak havoc, hide potentially incriminating information, and/or disrupt or damage computer systems. Gargoyle employs custom datasets containing thousands of malware software signatures. Because the search is done for the individual files associated with a particular program, it is possible to find remnants even if the program has been deleted.

What can be identified?
Gargoyle provides the investigator with the ability to glean important suspect characteristics from the information revealed. The computer sophistication, covert behaviors, and paranoia levels (has the suspect tried to delete incriminating programs?) can all be derived when searching for applications with a common theme. These behaviors can assist in assessing suspect capability, activities, intent, threat or "consciousness of guilt".

What is a dataset?
A dataset is simply a collection of malware applications and files, organized into a relational database. The database is formatted similarly to the NSRL distributions. One dataset (database file) is created for each malware category.

Separate datasets can be created for various classifications of malware (i.e. steganography software, vulnerability assessment tools, network sniffers, port scanners, hacker tools, password cracking tools, Denial of Service tools, etc.).* Additional datasets are released on a monthly basis.

View our current datasets

What is included in the package?
Gargoyle Forensic Pro is designed for forensic investigators, examiners, law enforcement personnel, private investigators, and forensic lab use. The Forensic Pro version includes all the malware datasets, Dataset Creator, Dataset Converter, embedded into Gargoyle is drive mounting software to mount EnCase, dd, raw, ISO and safeback images, detailed forensic evidence reports with 1 year of software maintenance and dataset updates.

                                                                                                    
Datasheet

Currency Converter