Sample Scenarios

The main e-commerce web server appears to have been hacked. It’s difficult to tell what the hacker may have done, your best option now is to perform forensic analysis. However, the server cannot be brought offline to image and may not be rebooted.

What do you do?

As part of pending litigation you've been asked to acquire select files from laptops, workstations, and servers. Many of these computers must remain operational throughout the acquisition process to avoid an adverse impact on the business.

What do you do?

A sales professional has just deleted a critical presentation on their laptop. You do not wish to install data recovery software as this may overwrite the presentation and do not have the time to remove the hard drive.

What do you do?

The answer?

In short, you use your F-Response Field Kit.

The F-Response Field Kit Edition is a value priced single user version of the F-Response patent pending software suite.

A F-Response Field Kit when physically connected to the remote computer will give you access to all the physical drives on that remote computer via the network.

Best of all the Field Kit is licensed for one year and priced at less than one typical hour of consulting time!

F-Response Benefits

• F-Response is a single executable ("exe") that requires no drivers or installation components

• F-Response does not require a reboot, therefore mission critical servers can be reviewed with F-Response without an adverse impact on operations

• F-Response works with all RAID disks, physical drives, logical volumes, and physical memory (32 & 64 bit)

• F-Response works with all Computer Forensics, eDiscovery and Data Recovery software packages, simply put, if your package reads from a hard drive, it will work with F-Response

• All F-Response software includes unlimited installations for a period of one (1) year from the date of purchase, software will cease to function at the end of the license duration unless renewed.

F-Response Supports

Windows includes Windows 2000, XP, 2003, Vista, 2008, & 7, 32 and 64bit, Physical memory only supported on 32bit and 64bit Windows.

Apple includes OSX 10.3,10.4,10.5,10.6 Universal Binary, *FK only supports Intel Apple OSX

Linux includes most Linux distributions build on Glibc 2.3.5 and higher

Solaris includes Solaris 8, 9, & 10 on SPARC

IBM AIX includes AIX 5.1,5.2,5.3,6.1 on the Power processor

HPUX includes HP_UX11iv2,11iv3 on the Itanium processor

FreeBSD includes AIX 7 on the Intel/i386 processor

SCO includes SCO OpenServer 6 and Unixware 7 on the Intel/i386 processor