Live Exchange has become a very exciting subject lately, we get quite a few emails, phone calls, and interview questions on accessing a live Microsoft Exchange Server to perform collection or analysis.

In fact, during my interview with CyberSpeak (see here ) I mentioned that Encase Forensic Edition, one of the stalewarts of the computer forensics industry didn't support opening a live Exchange Server database. Well with their newest release, 6.12, they now give you the option.

So, we put together a brief video of F-Response Enterprise and the newest version of Encase Forensic, 6.12. 

It's very exciting to see yet another option for live analysis with F-Response, we can't take credit for it, but we're very happy to see it.

We recommend bringing the video to full screen, that should make it easy to see and enjoy!

Warmest Regards,

M Shannon, Founder

F-Response

November 28, 2008