1. Decision Group Inc. www.edecision4u.com
E-DETECTIVE
Decision Group Inc.

2. Contents E-Detective Wireless-Detective E-Detective Decoding Centre
HTTPS/SSL Interceptor
Decision Computer Group

3. LAN Internet Monitoring & Forensics Analysis System
E-Detective
LAN Internet Monitoring & Forensics Analysis System
Solution for:
Internet Monitoring/Network Behavior Recording
Auditing and Record Keeping
Forensics Analysis and Investigation
E-Detective Standard System Models and Series
FX-06
FX-30
FX-100
FX-120
~ 10 Mbps
10 ~ 60 Mbps
60 ~ 200 Mbps
200 ~ 700 Mbps
Decision Computer Group

4. Port-mirroring or In-line monitoring
E-Detective Work Flow
Port-mirroring or In-line monitoring
Capture
Packets
Reassemble
& Decode
E-Detective Work Flow
Statistical
Reports
Content
Reconstruct
/Webmail
IM/Chat
HTTP
File Transfer
VoIP
Archive
Decision Computer Group

5. Internet Protocols Supported
Webmail
HTTP
(Link, Page,
Upload/Download)
IM/Chat
(Yahoo,
MSN, ICQ,
QQ, IRC,
Google Talk
Etc.)
File Transfer
FTP, P2P
Others
Decision Computer Group

6. More Than 140 Internet Application Decoders
Generic
POP3, IMAP, SMTP
Webmail
GMail, Yahoo, Hotmail, … more than 21
Instant Message
MSN, GoogleTalk, ICQ, … more than 8
Web Page
Link, Content, Request
Web FTP
Upload/Download
Web Video
YouTube, GoogleVideo…
File Transfer
FTP, P2P, … more than 20
Telnet
BBS Playback is available
Asia On-Line Game
More than 81
VoIP
SIP, H.323 (G.711, G.729, ILIBC)

7. Sample Screenshots - Reports
Decision Computer Group

8. Sample: Email (POP3, SMTP, IMAP)

9. Sample: Webmail (Read/Sent)
Webmail Type: Yahoo Mail, Gmail, Windows Live Hotmail, Giga Mail and others
Decision Computer Group

10. Sample IM/Chat: Yahoo, MSN etc.
Decision Computer Group

11. Sample: HTTP Web Browsing
Whois function provides you the actual URL Link IP Address
HTTP Web Page content can be reconstructed
Decision Computer Group

12. Sample: Video Streaming
Playback of Video File
Video Stream (FLV format): Youtube, Google Video, Metacafe.
Decision Computer Group

13. WLAN Analytics/Forensics/Legal Interception System
Wireless-Detective
WLAN Analytics/Forensics/Legal Interception System
Support Wireless LAN a/b/g Scanning & Packet Capturing
Automatically WEP Key Cracking (WPA Optional Module)
Decode and Reconstruct WLAN packets
Capture/Decode/Display are All-in-One
All in One System!
Important Tool for Intelligent Agencies such as Police, Military, Forensics, Legal and Lawful Interception Agencies.
Decision Computer Group

14. Implementation Diagram
WLAN Interception Standalone Architecture Deployment
(Capture a single channel, a single AP or a single STA)
Decision Computer Group

15. Sample: Scan and Capture GUI
Displaying information of Wireless devices (AP/STA) in surrounding area.
Decision Computer Group

16. Sample: Email (POP3, SMTP, IMAP)
Date/Time, From, To, CC, Subject, Account, Password
Decision Computer Group

17. Wireless Equipment Locator
Utilizes Wireless Sensors and Triangulation Training Methods to estimate
the location of the targeted Wireless Devices.
1 WD Master system + min. 3 WD Slave systems (sensors)
Note:
WatchGuard.WLAN can be used in place of WD slave systems for this Wireless Equipment Locator function)
Decision Computer Group

18. Wireless-Detective Superiority -
Smallest, Portable and Mobile
Capturing of WLAN packets from Multiple Channels by deploying Distributed/Multiple Systems
Decryption of Wireless Key, WEP Key (WPA cracking is optional module)
Decoding and Reconstruction of Internet services/protocols On The Fly
Condition Search and Free Text Search are available
Wireless Forbidding/Jamming is available
Wireless Equipment Location function.
The All-in-One Portable WLAN Interception System
Decision Computer Group

19. E-Detective Decoding Centre
Designed for Off-line Packet Reconstruction
Multi-Users and Case Base Management
Administrator can create different project/case for different user/investigator to conduct Internet raw data parser and forensics analysis task on the system
Various Content of Internet Applications Decoding
(POP3, SMTP, IMAP), Webmail (Yahoo Mail, Gmail, Hotmail etc.) IM (Yahoo, MSN, ICQ, QQ, UT, IRC, Google Talk, Skype Voice Call Log), File Transfer (FTP, P2P), HTTP (Link, Content, Reconstruct, Upload/Download, Video Stream), Telnet, Online Games, VoIP, Webcam (Yahoo, MSN)
Decision Computer Group

20. Implementation Diagram
Off-line Packets Decoding and Reconstruction system.
Comes with User and Case Management functions.
Decision Computer Group

21. HTTPS/SSL Interceptor
Decrypting HTTPS/SSL Traffic
Operation Modes
Network Crack and Redirect - Man in the Middle Attack
HTTP/HTTPS Proxy and Certificate Replacement
To view encrypted content,
a key is a needed
Decision Computer Group

22. Thank You !