German Digital Forensics Service Provider Streamlines Identity Security Using Securden

DigiFors GmbH deploys Securden Password Vault for Enterprises to centralize identity management, enforce controls on password usage, and gain complete visibility over access by internal teams and external experts.

The Background

Based in Leipzig, Germany, DigiFors GmbH is a digital forensics and incident response service provider for law firms, courts, public prosecutors, and commercial organizations. DigiFors helps organizations in improving data security measures and in simplifying the handling of data in connection with criminal or investigative proceedings.

In addition to IT forensics, DigiFors offers cybersecurity services such as penetration testing, SOC services, SIEM, EDR, and vulnerability management.

The Challenge

DigiFors’ services are literally equivalent to finding a needle in the haystack, that too in a quick, efficient and reliable manner. Their specialized digital forensics services involve analyzing large volumes of network traffic, both recorded and live, on the internet or intranet.

In the course of investigating disputes and complaints related to data manipulation, copyright infringements, industrial espionage, software piracy, and other cybercrimes, DigiFors conducts highly sophisticated analyses to capture crucial evidence.

DigiFors makes use of various purpose-built tools and systems to perform the analysis and render IT services. Different micro teams within DigiFors and its network of associates, who are experts in the field of network packet processing need access to these tools and systems.

“We deal with a lot of credentials - passwords, SSH keys, tokens, domain accounts, service accounts, and application accounts that grant access to the IT infrastructure, tools, and systems on a daily basis,” says Jessica Gescheidle, Penetration Tester at DigiFors.

DigiFors had created a password-protected file in which the credentials had been stored. The file had been shared with all required stakeholders, who needed access to the credentials.

Though secure password storage practices were followed, the biggest drawback was that the approach didn’t have granular access control. Anyone who had access to the encrypted database was able to access all the passwords stored.

DigiFors was growing fast and that meant a plethora of passwords. “It was difficult to track who created passwords or who all were accessing them,” points out Jessica.

As an organization that proactively enforces security best practices, DigiFors wanted to deploy a password management solution to effectively enforce controls on password usage and gain complete visibility on access.

The Search for the Right Solution

The DigiFors team began evaluating various password management solutions available in the market.

Their evaluation criteria had four important considerations:

• They required a self-hosted password manager. Cloud-based solutions were not preferred.
• Integration with Microsoft Entra Single Sign-On was essential as it was not desirable to create separate accounts for password manager access or require users to remember additional login credentials.
• Provision to grant specific permissions to specific users and groups
• Reports to track ‘who’ has access to ‘what’ credentials

After a careful evaluation of various password managers, DigiFors found that Securden met all their requirements and was the best fit for their environment. The deployment process was quick, smooth, and straightforward.

“We have hosted the product within our infrastructure. It connects to the internet only when product updates are needed. The multiple layers of protection enforced by Securden before granting access to the password manager are critical for us,” says Jessica.

The Securden Difference

DigiFors has now achieved centralized password management and granular access controls. All credentials are securely stored and properly organized in the form of multiple folders. “This makes it easy to provision access to different teams with complete controls,” explains Jessica.

“Our team members are now able to login to tools, systems, websites, and applications without needing to know the credentials. We are extensively utilizing the connection launching feature, which comes with various controls,” adds Jessica. As an advanced digital forensics organization, DigiFors consistently prioritizes data security and strictly adheres to data protection measures. Securden provides an essential additional layer for password security.

“We now have complete visibility over account ownership and who has access to each account. Audit trails offer a goldmine of information,” says Jessica.

“Securden’s technical support is very quick and prompt and as a customer, I feel heard,” emphasizes Jessica.

Having established itself as a reputable digital forensics organization in the German market, DigiFors is now looking to expand its range of services and business area to other European countries. “Identity security is a critical component of data protection and Securden is a reliable provider. We are planning to expand our usage of Securden Password Vault for Enterprises,” declares Jessica.

Identity Security Streamlined Using Securden Password Vault for Enterprises Download an offline (PDF) version of this case study to see how digital forensics services provider DigiFors heightened security for their privileged identities using Securden Password Vault for Enterprises.

Download Case Study