HexaCore IR
Enterprise-grade forensics and rapid incident response powered by OpenText™ Endpoint Forensics & Response (EFR), delivered through a secure hybrid managed service model.
Platform Overview
Hybrid Digital Forensics & Incident Response
Remote Evidence Collection
Remote Evidence Collection
Acquire critical artifacts, logs, and files covertly from endpoints globally without user disruption or site visits.
Hybrid Trust Architecture
Hybrid Trust Architecture
Our unique deployment model ensures you retain control of your private keys and SAFE servers while we handle the heavy-duty forensic compute.
Advanced Memory Acquisition
Advanced Memory Acquisition
Perform full or selective remote memory dumps to identify fileless malware and volatile threats in real-time.
Architecture & Compliance
Detailed architecture, compliance, and operational specifications for enterprise evaluation.
| Feature | Architecture |
|---|---|
| Core Engine | OpenText™ Endpoint Investigator |
| Orchestration | Multi-node ELS Cluster |
| Access Control | mTLS Reverse Proxy with Tenant Mapping |
| Encryption | AES-256 (At Rest) / TLS 1.3 (In Transit) |
| Data Sovereignty | Client-held Keymaster Keys |
| Feature | Regulatory |
|---|---|
| Data Privacy | GDPR compliant (Section 11.6) |
| Security Controls | NIST 800-53 (AC-6, SC-7, SC-28) |
| Audit Readiness | SOC 2 Type 2 / ISO 27001 |
| Forensic Integrity | SChain of Custody automation |
Product Support Services
HexaBreach specialists are available to support deployment, onboarding, architecture, operations, and platform success.
Platform Onboarding
Deployment planning, architecture validation, integration guidance, and rollout support.
Technical Enablement
Access to HexaBreach product specialists for operational support and optimization.
HexaCore IR Resources
Deployment Architecture
Client-Hosted (The Trust Layer)
You host the SAFE server, Keymaster private keys, and endpoint agents, ensuring forensic data remains encrypted and under your governance.
MSSP-Hosted (The Compute Layer)
Hexabreach manages the ELS cluster, web application, mTLS reverse proxy, and horizontally scaled Examiner pool for maximum performance.
Core Platform Capabilities
Explore the core capabilities delivered by the HexaCore IR platform.
IOC Sweeping
Automate YARA-based scans across your entire fleet to identify indicators of compromise instantly.
Tenant Isolation
Cryptographic separation enforced via per-tenant SAFE Sources and mTLS routing.
Live Response
Suspend malicious processes, quarantine files, and contain threats directly from the forensic console.
Centralized Visibility
Unified dashboard for managing forensic jobs across distributed enterprise environments.
Compliance Ready
Aligned with NIST 800-53 and SOC 2 requirements for forensic data handling.
Scalable Examiner Pool
High-performance processing engines capable of handling large-scale concurrent forensic tasks.