EnCase and ThreatGRID Integration Provides Deep Insight and Context Into Today's Cyber Threats

ThreatGRID Malware Analysis and Intelligence for EnCase Reduces Time for Investigation and Response


NEW YORK, NY--(Marketwired - May 19, 2014) -  Guidance Software, Inc. (NASDAQ: GUID), the World Leader in Digital Investigations™, and ThreatGRID®, the first unified malware analysis and threat intelligence solution, announced an integration today to provide customers with unprecedented insight into malware and cyber threats not addressed by traditional anti-malware solutions. ThreatGRID is delivering a new app, Malware Analysis and Intelligence for EnCase, available to EnCase users on EnCase® App Central that reduces incident responder time and effort to identify and analyze suspected malware.

"ThreatGRID is excited to offer EnCase customers access to our groundbreaking integrated malware analysis and threat intelligence solution through our no cost app," said Dov Yoran, CEO and Co-Founder at ThreatGRID. "Powered by ThreatGRID's unmatched threat content with global and historical context, Guidance Software customers can now rapidly and securely analyze and respond to unknown threats, discovered on the estimated 20 million endpoints deploying EnCase® technology."

Guidance Software is the leading provider of digital investigations software and hardware products. Guidance Software's EnCase® products are used extensively by government, corporate and law enforcement authorities worldwide for security, forensic, and e-discovery investigations. Guidance Software's EnCase App Central is an online community and marketplace for digital investigators that provides access to apps, best practices, and community support. EnCase App Central includes both free and paid apps built using the EnScript programming language. Each app is vetted and tested by a technical team at Guidance Software before it is made available at EnCase App Central.

"ThreatGRID Malware Analysis and Intelligence for EnCase is a great addition to the App Central marketplace, building value for users of our EnCase security and forensic products," said Alex Andrianopoulos, Vice President, Marketing for Guidance Software. "With over 100 apps to choose from, EnCase customers have used EnCase App Central to download apps more than 28,000 times since we launched the site just over a year ago."

ThreatGRID's malware analysis and threat intelligence platform is the first malware analysis and intelligence integration with EnCase, lowering the costs and risks of network breaches through a more automated workflow. It rapidly identifies key behavioral indicators, providing fast and accurate threat content enriched with global and historical context. It provides five key analysis and threat intelligence features for EnCase Enterprise, EnCase® Cybersecurity and EnCase® Analytics, enabling swift identification and response to unknown threats on endpoints. ThreatGRID Malware Analysis and Intelligence for EnCase provides powerful search and analysis capabilities, one mouse click away:

  • Search Highlighted IP Address within ThreatGRID
  • Search Highlighted Domain within ThreatGRID
  • Search File Hash Value within ThreatGRID
  • Search Tagged File Hash Values within ThreatGRID
  • Upload File to ThreatGRID for Analysis

The integration uses ThreatGRID's API to connect to its cloud-based threat intelligence platform, all of which is transparent and private to the end user to ensure an efficient user experience in the familiar EnCase interface.

ThreatGRID will showcase its Malware Analysis and Intelligence for EnCase at the Computer and Enterprise Investigations Conference (CEIC) to be held at Caesars Palace in Las Vegas, May 19-22, 2014. CEIC is the industry's premier cybersecurity, e-discovery, and digital forensics conference. Attendees can view a live demo of the combined ThreatGRID and EnCase solution at ThreatGRID's booth #313 and at the CEIC EnCase® App Central World. Attendees can also register for the following labs conducted by ThreatGRID experts for hands-on experience with the solution:

  • May 21, 8 am: Building an Integrated Response Capability with EnCase Cybersecurity (Cybersecurity and Incident Response Labs)
  • May 21, 2:30 pm: EnCase Malware Analysis Powered by ThreatGRID (Advanced Digital Forensics Labs)

ThreatGRID and Guidance will also host a webinar, Threat Intelligence for EnCase, on June 4th, 2014.

ThreatGRID Malware Analysis and Intelligence for EnCase is available for download at no cost to Guidance Software's customers from the EnCase App Central store, including a 30-day pilot of the full ThreatGRID solution with free malware sample submissions and contextual searches of the threat intelligence repository.

About Guidance Software
Guidance Software is recognized worldwide as the industry leader in endpoint investigation solutions for security incident response and forensic analysis. Its EnCase® Enterprise platform, deployed on an estimated 20 million endpoints, is used by more than 65 percent of the Fortune 100 and more than 40 percent of the Fortune 500, and numerous government agencies, to conduct digital investigations of servers, laptops, desktops and mobile devices. Built on the EnCase Enterprise platform are market-leading cyber security and electronic discovery solutions, EnCase® Cybersecurity, EnCase® Analytics, and EnCase® eDiscovery. They empower organizations to conduct speedy and thorough security incident response, reveal previously hidden advanced persistent threats or malicious insider activity, perform sensitive data discovery for compliance purposes, and respond to litigation discovery requests. For more information about Guidance Software, visit www.encase.com.

EnCase®, EnScript®, FastBloc®, EnCE®, EnCEP®, Guidance Software™ and Tableau™ are registered trademarks or trademarks owned by Guidance Software in the United States and other jurisdictions and may not be used without prior written permission. All other trademarks and copyrights referenced in this press release are the property of their respective owners.

About ThreatGRID
ThreatGRID is the first unified malware analysis and threat intelligence solution that is revolutionizing how organizations use accurate and context-rich intelligence to defend against advanced cyber attacks. ThreatGRID customers include large organizations across a number of verticals such as financial services, government, healthcare, energy, manufacturing and more. ThreatGRID securely crowdsources large volumes of malware and performs advanced analysis in the cloud, to identify key behavioral indicators enabling near real-time remediation. ThreatGRID empowers security teams with continuous real-time threat intelligence, enriched by global and historical context, to prevent future attacks. ThreatGRID's API simplifies sample submission and intelligence integration with EnCase® Enterprise and other security products to maximize the effectiveness of existing investments. Founded by entrepreneurs with deep security expertise, ThreatGRID is privately held and is based in New York City. For more information, visit www.threatgrid.com, read our blog, follow us on Twitter @ThreatGRID and LinkedIn.

Contact Information:

Guidance Software
Brigitte Engel
626-229-9191