D

Darktrace / Forensic Acquisition & Investigation

Application

by Darktrace

Automated forensic capture for cloud, container and ephemeral assets, triggered from any alert source over API so evidence is preserved before it disappears.

Find alternatives to Darktrace / Forensic Acquisition & Investigation

No published pricing; every call to action on the page is 'Get a demo', routing to sales.

What it does

• Threat detection and response

Sources

Pricing

Official documentation · 5 Sep 2026

No published pricing found; the page routes to a demo request rather than showing rates.

Description

Official documentation · 5 Sep 2026

Product page: 'enables faster and deeper investigations in the cloud', 'Integrates with any alert source and deploys via API', 'Support containers and ephemeral assets'. Grouped under Cross Platform Products in the site navigation. Recorded 2026-09-05, when the Darktrace catalog was reconciled against darktrace.com/products and the site navigation: the dataset had held 1 of its 7 core products.

Sold within

Official documentation · 5 Sep 2026

The site navigation lists Forensic Acquisition & Investigation under Cross Platform Products of the platform; the page itself carries no packaging sentence. Platform page: 'Begin with the security controls that best suit your current priorities: AI, people, or infrastructure. Powered by the same Adaptive AI, every product in the Darktrace Behavioral Defense Platform is natively integrated and designed to strengthen one another over time.'

Also from Darktrace

• Cyber AI Analyst Application

  The investigation engine inside every Darktrace product: triages each alert the way a human analyst would, using Darktrace's DEMIST-2 and DIGEST models to correlate events into an incident narrative and write the report -- Darktrace says it accelerates triage by 10x. Not sold on its own.

• Darktrace ActiveAI Security Platform Platform

  Darktrace's self-learning security platform, sold as a set of natively integrated products (network, email, cloud, OT, identity, endpoint and AI-agent security) that share one Adaptive AI model of what is normal for a customer and respond autonomously when behaviour deviates; being renamed the Behavioral Defense Platform.

• Darktrace / SECURE AI Application

  Security for an organisation's own AI agents and assistants: learns how each agent normally behaves and what access it accumulates, and flags drift, misuse and prompt-driven abuse before it spreads.

• Darktrace / NETWORK Application

  Network detection and response that models normal traffic for every device and user inside the customer's own environment, then detects and contains known and unknown threats without cloud-trained signatures.

• Darktrace / EMAIL Application

  Email security that learns each mailbox's normal correspondence to stop novel phishing, account takeover and business email compromise, with add-on modules for data loss prevention, messaging apps and DMARC.

• Darktrace / CLOUD Application

  Cloud detection and response across multi-cloud environments: maps identities, roles and permissions, detects lateral movement and insider threats, and enforces compliance baselines.

• Darktrace / OT Application

  Operational-technology security that protects industrial production assets and the IT systems connected to them in one model, covering risk management, detection and response for OT networks.

• Darktrace / IDENTITY Application

  Identity threat detection and response that learns how each account normally behaves across SaaS, cloud and network to catch account takeover and credential misuse that perimeter tools trust by default.

• Darktrace / ENDPOINT Application

  Endpoint detection and response that builds a pattern of life for each device, including standalone and remote endpoints, and contains threats that deviate from it.

• Darktrace / Proactive Exposure Management Application

  Exposure management that ranks a customer's attack paths and vulnerabilities by the AI's model of their estate, so remediation targets the risks most likely to be exploited.

• Darktrace / Attack Surface Management Application

  External attack-surface discovery that finds the internet-facing assets an organisation does not know it owns and scores the exposure they create.

• Darktrace / Incident Readiness & Recovery Application

  Incident readiness that generates bespoke, AI-written response playbooks for a customer's own environment and supports recovery and compliance reporting after an attack.

• Darktrace / Adaptive Human Defense Application

  Personalised security coaching: phishing simulations and bite-size e-learning tuned to each employee's behaviour, feeding what it learns back into the platform's detection.

Open Darktrace in the directory

Something wrong here? Send a correction — quote this product id: darktrace-forensic-acquisition-investigation.