Cisco Incident Response - CIR Online Service

This is a free service provided by Recurity Labs GmbH for analyzing Cisco® IOS® core dumps.

Introduction

CIR Online allows network engineers and digital forensics experts to analyse memory dumps (so-called core dumps) from Cisco® IOS® devices in great detail, simply by providing the core dump file(s). CIR Online identifies compromised routers, exploitation attempts and backdoors as well as process and memory anomalies.

To learn about Cisco IOS crash analysis, attacks, exploitation and IOS rootkits, visite the IOS Crash Analysis and Rootkit Wiki
To learn more about CIR, this service and the currently supported platforms, visit the Introduction to CIR
Learn how to configure Cisco IOS devices for using CIR.
Get an overview of the CIR features.
Compare this service to the CIR Professional option.

Start using CIR Online

Submit data for analysis:
View reports for a case

News

24.05.2008	The CIR Online Service β is announced at PH-Neutral 0x7d8
22.05.2008	The CIR Online Service is relaunched as β version
20.02.2008	The CIR Online Service α is announced at the BlackHat Briefings in Washington DC / USA.

Legal

cir.recurity-labs.com - CIR Online and CIR are products of Recurity Labs GmbH.
Recurity® is a trademark of Recurity Labs GmbH. Cisco® and IOS® are trademarks of Cisco Systems.
Terms of use.