Network forensics · sold separately from Admiral
pCapitan
A forensic analyst in a box. pCapitan reads a capture file or live traffic and tells the whole story in plain language, from devices and applications to attacks and their outcome, with the proof one click away. Version 2.0 keeps every client site as an assessment with its history, so statuses stay when you collect again and a fixed finding that comes back is flagged, and its attack paths show the fewest fixes that cut the most paths. New official reports (a forensic examination, a law-enforcement referral and an executive summary) export as PDF/A with an advanced electronic signature. It runs entirely on your computer.
What you get
- New in 2.0: official reports. A forensic examination report, an incident report for law-enforcement referral and an executive summary, laid out to the structure the standards ask for, with every mandatory value and the wording checked before export. They export as PDF/A with an advanced electronic signature, and an issued report is kept as evidence with its SHA-256
- New in 2.0: assessments. Every capture, external scan, SSH key collection and SBOM of a client site in one place, with an asset inventory, one findings list, a risk score and a report chapter per security domain
- New in 2.0: history. Each collection is a snapshot; accepted, fixed and false-positive findings keep their status, a fixed finding that comes back is flagged, and you can report on any snapshot
- New in 2.0: attack paths that name the findings behind every step and show the fewest fixes that cut the most paths
Who it's forSecurity and network engineers, SOC analysts, incident responders, managed service providers and IT teams, and anyone handed a capture who needs clear answers fast.
$39.99 once
Buy pCapitan
