| How does F-Response work? |
 |
 |
 |
| Written by Administrator |
| Wednesday, 19 August 2009 16:50 |
|
F-Response is based on the well documented iSCSI standard to create a secure, read-only connection between the examiner’s computer and the computer under inspection. F-Response makes the storage devices on the computer under examination completely accessible to the examiner’s computer where they appear as local, raw, physical storage devices. The F-Response connection is completely read-only, functioning much like a software write blocker. F-Response software protects the remote examiner by ensuring that they cannot – even by mistake – alter data stored on the remote computer during the examination. Licenses are sold on an annual basis with no limitation on the number of installations or uses. A secure USB key (“FOB”) is utilized to enable the licensing option purchased. F-Response is available under three different licensing options that are designed to appeal to corporations, consultancies and independent consultants. These options are as follows: F-Response Field Kit is a point solution that permits an examiner to review any number of machines over a network, but only one machine may be examined at any given time. In this case, the F-Response USB license key or “FOB” resides at the machine under examination. F-Response Consultant is a solution that permits many machines to be examined simultaneously over a network. F-Response GUI-based Target code is executed on each machine to be examined. In this case, the F-Response FOB resides at the examiner’s machine. F-Response Enterprise is a solution that permits many machines to be examined simultaneously over a network. F-Response command line or GUI-based Target code is executed on each machine to be examined. The F-Response FOB resides at the examiner's machine, or may support an F-Response server dedicated to live forensics analysis. If a Managed Forensics Service capability is desired, then secure remote access can be provided to the dedicated server (appliance) in order that third party forensics experts can conduct remote examinations on an as-needed basis.
|
fresponse_s
1-800-317-5497
support
f-response.com