F-Response Released - Manual resuming for device imaging, F-Response Collect gets profiles!

Sep 02, 2021

I'm very happy to announce two new F-Response releases covering all our products.

Click here to get the latest installers.

First, F-Response classic (TAC, CE, CE+C, EE) and Universal (UNIV) both now offer manual physical image resumption.

What does this mean?

This means if you lose connectivity during a device (not target) imaging operation, the device and the subject will drop out and the image will fail, but unlike before, now if you reconnect the disk you can right-click and resume the imaging operation. This is only for the physical device image (ie. Right-clicking on an attached device and selecting Create Image...). You can find more information about how this works in the F-Response Manual or F-Response Universal Manual.

Does it pick up exactly where I left off?

No. It'll get close, but the Expert Witness(E01) format means we'll have to drop back a certain amount to make sure things line up. Still, you've got a good chance of saving valuable time and energy if you are imaging a device that has a high likelihood of disconnecting.

Next, F-Response Collect gets a brand new wizard and a new collection option. We've added the ability to collect user profiles in addition to disks and volumes. In order to take advantage of this new option you will need to update both your subjects and your server, but the overall process should be very straightforward. In fact, the latest Collect Manual outlines the revised collection process and should give you a great feel for how to work with it.

Thanks for taking the time to get up to speed on what's new. We'll be covering more about these two new versions in coming newsletters, but in the meantime, enjoy your labor day holiday.

Warmest Regards,

M Shannon, Managing Principal