Sample Scenarios

The business has identified Steve in Finance as an individual that should be investigated, Steve is a laptop user. Steve brings the laptop to work, however he does not leave it overnight. The business doesn’t want Steve to know he is being investigated.

What do you do?

Multiple e-commerce web servers appears to have been hacked. It’s difficult to tell what the hacker may have done, your best option now is to perform forensic analysis. However, the servers cannot be brought offline, are located in numerous offices, and they may not be rebooted.

What do you do?

As part of pending litigation you've been asked to acquire select files from a large number of laptops, workstations, and servers. Many of these computers must remain operational throughout the acquisition process to avoid an adverse impact on the business. You have a team of staff ready to begin analysis.

What do you do?

The answer?

In short, you use F-Response Enterprise Edition.

The Enterprise Edition of F-Response is our service based (Non GUI) version of F-Response uniquely designed for Managed Services consultants and internal corporate investigations.

F-Response Enterprise provides all the features of F-Response Consultant Edition, streamlined for large network deployment, with enterprise class management console for deployment and designed to support either an internal corporate investigations team or a managed services investigations appliance.

Best of all, F-Response Enterprise is not licensed on a seat basis, one license of F-Response Enterprise provides unlimited client installations for a year.

F-Response Enterprise Management Console

F-Response Benefits

• F-Response is a single executable ("exe") that requires no drivers or installation components

• F-Response does not require a reboot, therefore mission critical servers can be reviewed with F-Response without an adverse impact on operations

• F-Response works with all RAID disks, physical drives, logical volumes, and physical memory (32 & 64 bit)

• F-Response works with all Computer Forensics, eDiscovery and Data Recovery software packages, simply put, if your package reads from a hard drive, it will work with F-Response

• All F-Response software includes unlimited installations for a period of one (1) year from the date of purchase, software will cease to function at the end of the license duration unless renewed.

• F-Response Enterprise Edition includes a license for F-Response Consultant and Field Kit Edition

F-Response Supports

Windows includes Windows 2000, XP, 2003, Vista, 2008, & 7, 32 and 64bit, Physical memory only supported on 32bit and 64bit Windows.

Apple includes OSX 10.3,10.4,10.5,10.6 Universal Binary, *FK only supports Intel Apple OSX

Linux includes most Linux distributions build on Glibc 2.3.5 and higher

Solaris includes Solaris 8, 9, & 10 on SPARC

IBM AIX includes AIX 5.1,5.2,5.3,6.1 on the Power processor

HPUX includes HP_UX11iv2,11iv3 on the Itanium processor

FreeBSD includes AIX 7 on the Intel/i386 processor

SCO includes SCO OpenServer 6 and Unixware 7 on the Intel/i386 processor