Digital Forensics

Overview

AhnLab’s digital forensic service team, A-FIRST (AhnLab Forensic Intelligence ReSearch Team), comprises digital forensics experts in the areas of malware, networks, and vulnerability. This team of highly dedicated and experienced professionals investigates the cause, impact, and intrusion paths to prevent threats from reoccurring and spreading. The service will ultimately ensure customer’s business resilience from both security and finance standpoints.

Service Architecture

How It Works

We provide digital forensics service to customers in need of current and past intrusion analysis. The experts at A-FIRST analyze corporate systems and networks to find the cause, impact, and paths of intrusion. They then deliver the analysis result report on their investigations and customized guidelines to improve the security system.

Objective

We analyze the root causes of security compromises to prevent the recurrence of breaches and minimize company-wide risks by proposing optimal prevention measures.

Key Service Components

• Discovering undetected breaches caused by new malware or novel hacking techniques
• Analyzing the root cause of the incident via intrusion paths and timeline investigation
• Minimizing additional damage via the root cause analysis
• Providing the service tailored to customer needs

Advantages

Distinguished Security Insight

A-FIRST is not only comprised of digital forensic experts but also specialized experts in network, malware, vulnerability, and kernel/system. AhnLab’s digital forensic service differs from other incident response(IR) services, with experts from only one or two fields. Our experts’ broad sets of skills serve pivotal roles in discovering and investigating every piece of evidence from different perspectives and helping customers construct optimal threat response strategies.

APT Response Knowledge

AhnLab is widely recognized for successfully coping with various APTs. By conducting forensic analysis based on practical and systematic processes along with its many years of experience and knowledge, AhnLab presents the most appropriate security countermeasures to protect businesses.

Exclusive Digital Forensics Technology

AhnLab has been running massive R&D workforces, enabling us to deliver exclusive unknown-malware detection technology powered by exceptional incident response knowledge and digital forensics expertise. Most importantly, one of our most significant strengths lies in our analysis & recovery technology, not supported by a commercial forensics tool, restoring any trace that attackers left. In addition, we have the “agent-based forensic analysis framework”, allowing us to analyze multiple systems more quickly and efficiently.

AhnLab Malware Analysis Infrastructure

AhnLab has collected a vast amount of malware samples and content by leveraging ASD(AhnLab Smart Defense, a large-scale cloud-based malware analysis system), Packet Analysis Center, SiteGuard(web analysis agents), and Secure DNS. Our big data-powered analysis infrastructure empowers the forensics experts at A-FIRST with the ability to conduct fast and accurate analysis.