FirstLook

FirstLook automates initial triage investigation and the deeper fast forensic investigation beyond it. Each verdict comes with its evidence, so security engineers can verify as they investigate.

Beta trial now openJapan-made forensic investigation automation tool (SaaS / on-premises)

Input your target data, and FirstLook automatically handles data processing and visualization, extraction and interpretation of findings, and scenario building, then outputs an investigation report.

Highlights

  • Ingests Windows event logs, the registry, the MFT and more, and analyzes them automatically
  • Delivers results faster and at lower cost than manual forensic investigation by experts
  • Automated verdicts rest on explicit rules, each shown with its supporting data
  • Delivers output with interpreted traces and likely scenarios
  • Analysts can review automated results on screen, correct the assessment, and finalize it
  • Ticket-based annual license
FirstLook

Investigation flow

FirstLook automates "data processing & visualization → extract findings → interpret findings → scenario building."

  1. 1Data collection (Input: target data)
  2. 2Data processing & visualization
  3. 3Extract findings
  4. 4Interpret findings
  5. 5Scenario building
  6. 6Report (Output: investigation report)

The value FirstLook delivers

Results you can trace and explain

Automated verdicts rest on explicit rules, so you can trace why a conclusion was reached all the way to the supporting data — and stand behind it to stakeholders and auditors.

See results quickly

Fast forensic analysis that preserves as much of the evidence as possible and reads context the way a specialist would, so users can review the results of a forensic investigation quickly.

A basis for first judgment

When something looks slightly off, or when it is unclear whether there is any risk at all, it gives you a fast, low-cost basis for a first judgment — before commissioning a full expert investigation.

People verify and correct the automated results

It doubles as a manual analysis tool: rather than taking the automated output as-is, analysts can search, filter and drill into events on screen, verify each finding one by one, and edit the verdicts themselves. You get the speed of automation while the final judgment stays with a person.

Beta trial now open

About the beta trial

FirstLook is now accepting beta trial participants. For adoption or evaluation inquiries, please contact us.

Contact us