F-Response Universal and Black Bag Technologies Blacklight

Nov 16, 2015

In the current release of F-Response Universal/Now (2.0.1.6) we added the ability to access remote Universal/Now subjects to a number of additional examiner platforms.

In fact, F-Response Universal customers running 2.0.1.6+ will find all the installation packages on their appliance download page (http://APPLIANCEHOSTNAMEORIP/univdl). F-Response Now customers should find the installations at (http://NOWIP/nowdl). The current list of supported examiner platforms includes:

Windows (Vista, 2008, 2008r2, 7, 2012, 2012r2, 8, 10)
Linux (Centos 6, 7, Debian 8, Ubuntu 14)
Apple OSX (10.8, 10.9, 10.10)

The most interesting additions to that list are the Apple OSX Universal/Now examiner packages. F-Response customers will note that Universal is the first version of F-Response to offer native examiner functionality for Apple OSX.

We knew this would be beneficial to F-Response Universal/Now customers, however we weren't sure of the best way to test and demostrate this new capability. Enter Paul Jordan and the team at Black Bag Technologies.

For those new to the scene or not part of the Apple Forensic world, Black Bag Technologies has been providing Apple OSX tools for Forensics, E-Discovery, and Incident Response for a number of years. In fact they are the creators of "Blacklight" a premier solution for Apple based analysis.

To make a long story short, we worked closely with Black Bag Tech to make sure F-Response Universal under Apple OSX would present disks, volumes, and memory in such a way that they could be readily opened and reviewed in Blacklight.

We've included some screen captures to give you an idea of what F-Response Universal/Now Subjects look like under Blacklight.

F-Response Universal/Now Subject Summary

F-Response Universal/Now Subject Details

F-Response Universal/Now Timeline

More native examiners, yet another reason to move up to F-Response Universal 2.0.1.6, or take advantage of on demand usage with F-Response Now.

If you have any questions about F-Response Universal, Now, or any F-Response products please don't hestiate to Contact Us and we'll happily get you answers.

Thanks and enjoy!

Warmest Regards,

M Shannon, F-Response
Principal