Description

FireEye Redline is an endpoint security tool designed for IT security professionals. It enables users to find signs of malicious activity through memory and file analysis, develop the threat assessment profile, analyze and view imported audit data to filter results around a given timeframe, audit and collect running processes and drivers from memory, file-system metadata, registry data, event logs, network information, services, tasks, and web history, streamline memory analysis for analyzing malware based on relative priority, and perform Indicators of Compromise (IOC) analysis. Features include metadata management, task optimization, TimeWrinkle support, workflow management, malware analysis, and priority management.