Software for the full
investigation lifecycle.
DFL 360, Packet 360, Forensic Endpoint 360, and Trace 360 — each built so the record of who did what, when, and to which piece of evidence is already written down.
Forensic Case &
Laboratory Management
DFL 360 walks every case through a guided laboratory workflow — from inward form to dispatch. Each entry is time-stamped, attributed, and ready to print. Runs on your servers inside your laboratory, with zero cloud dependency.
- Seven-step workflow · 9 case statuses · 12+ printable case PDFs
- Chain of custody with both parties, purpose, and printable custody report
- Acquisition forms, hash verification, certificates, and letterhead PDFs
- Field-level audit · Server-side permissions · On-premises
Network Forensics &
Threat Hunting
Packet 360 is on-premises network forensics built for forensic laboratories. Load a capture and deep packet inspection, protocol decoding, session analysis, and intrusion detection run entirely on your infrastructure. No cloud upload, ever.
- Deep inspection across web, email, DNS, file transfer, remote access, and VoIP
- Multi-engine IDS with 100K+ rules and MITRE ATT&CK mapping
- Behavioural analytics — beaconing, exfiltration, lateral movement, C2
- SHA-256 & MD5 at ingest · Printable reports · SIEM exports
Endpoint Monitoring
for Forensic Labs
Forensic Endpoint 360 watches every Windows computer in your lab and records what was copied out, who did it, when, and how. It never deletes a file or disturbs a phone acquisition. No cloud — nothing is sent to Cyfonix.
- USB hold & control — unknown sticks wait for officer name and reason
- Copy, share, upload, print, and device logs on one timeline
- Acquisition mode — phones and write-blockers are never held
- SHA-256 audit chain · Fingerprinted reports · Works offline
OSINT Investigation
Platform
Give Trace 360 a number, email, IP, domain, or username. It searches and correlates hundreds of platforms — including dark-web sources — and returns one sourced, evidence-ready intelligence picture inside a secure, 2FA-protected environment.
- Mobile, email, IP, domain, and username correlation
- Breach, caller ID, social, WHOIS, VPN/proxy, and risk modules
- Advanced IP grabber for authorised investigations
- 300+ platforms · OSINT & dark web · Evidence-ready exports