F-Response Universal
What is F-Response Universal?
F-Response Universal is a server-based product provided by F-Response which leverages patented technology ("F-Switch") to provide access to remote systems virtually anywhere in your network. F-Response Universal provides near instant access to Windows, Linux, and Apple OSX devices virtually regardless of the location provided they have network access.
F-Response Universal User Interface
How does F-Response Universal work?
F-Response Universal uses a patented remote connectivity technology that enables an authenticated, read-only connection to be created between the examiner's computer and the computer(s) under inspection, over any network. F-Response Universal readily traverses most firewalls, NAT/PAT routers, and other complex networking technologies making it remarkably fast and easy to connect to remote systems almost anywhere in the world.
F-Response Universal is sold in 1 and 3 year license durations.
What are the advantages of F-Response Universal over F-Response Enterprise?
F-Response Universal provides access to remote Windows, Linux, and Apple OSX devices via the network, much like F-Response Enterprise. However, F-Response Universal does not require dongle(s), integrates more deeply in your environment, supports Active Directory authentication, and provides the full deployment console to all authenticated examiners. In addition, F-Response Universal often does not require firewall modifications and is completely encrypted by default. For additional differences between F-Response Universal and the entire F-Response product suite see the Product Matrix.
Who would use F-Response Universal?
For E-Discovery Professionals
F-Response Universal was designed to give litigation teams extended geographic and technical reach to access unlimited live remote machines data in a completely write protected manner.
Once connected, the files and folders on remote devices are presented via a DiscoveryShare(TM), giving litigation teams the ability to review data by simply using the Windows file browser for quick review, or their litigation tools for more extensive research.
F-Response Universal DiscoveryShare showing Apple OSX Files and Folders
For Forensic Investigators
F-Response Universal includes access to remote physical disks, volumes, partitions, and RAID devices, allowing a Forensic examiner to leverage existing tools, techniques, and methodologies to perform investigations with pinpoint accuracy and precision.
For Incident Handlers/Responders
F-Response Universal presents remote Windows computer physical memory via the MemoryShare(TM) as a live image file, giving the handler the ability to simply collect the image file or analyze it using a popular forensics tool such as Volatility. The image file is not a snapshot of the remote physical memory, rather it represents the live physical memory of the remote machine.
F-Response Universal attached MemoryShare(TM), providing access to the remote Windows computer's Physical Memory in real time.
F-Response Universal In Action
F-Response Universal - Windows
F-Response Universal - Linux
F-Response Universal Benefits
Full Deployment Capability
F-Response Universal offers the ability to deploy to remote systems via LAN/WAN and MSI. Deployment capability does not require a dongle, all authenticated Universal examiners have the ability to use the full deployment console.
Full Live Read-Only Access, No File Level Locking
F-Response Universal provides live, read-only access to the remote target computer's files. Since all access is at the physical level there is no file level locking, F-Response Universal gives you access to any and all content on the remote target, including protected system content (Registry files, Email PSTs, Database Files, etc).
MemoryShares(TM)
F-Response Universal provides access to remote physical memory via MemoryShares(TM). MemoryShares(TM) provide live physical memory access to remote Windows subject physical memory as a live file, suitable for imaging and analysis with virtually any incident response product.
Security
All subject data in transit when using F-Response Universal is encrypted using AES 256 bit symmetric encryption.
Multi-Platform Support
Multi-platform support is included in F-Response Universal, further extending the team's reach into Linux and Apple platforms. F-Response Universal Supports Apple OSX 10.3+ (Note: SIP must be disabled in 10.13+) and Linux Distributions 2002+.
F-Response Agentless Connections
F-Response includes support for collecting file and folder content from remote SMB and SFTP shares. This includes both NAS devices, and remote Windows, Linux, and Apple servers. For more details on F-Response's specific SMB and SFTP collection options, please see the appropriate Mission Guide on our Mission Guides and Documentation page.
Cloud Collection Support
F-Response Universal includes support for collection cloud data from the following providers: Azure Blog Storage, Amazon Simple Storage Services (S3), Box.com for Business, Box.com for Consumers, Dropbox for Business, Dropbox for Consumers, Google Drive for Consumers, Google Mail for Consumers, GSuite, Microsoft OneDrive for Consumers, Office365 OneDrive
Licensing and Usage
F-Response Universal is sold in 1 and 3 year license terms. F-Response Universal has no licensed limit to the number of concurrent examiners or connections (actual performance may vary based on bandwidth, region networks, client systems, etc).
Buy F-Response Universal
F-Response Univeral is available in 1 and 3 year license terms and can be purchased directly from F-Response.com. Buy F-Response Universal.
IMPORTANT NOTE: Always remember, all renewal prices are available here on our website, and all licenses of F-Response automatically include maintenance, support, online training, enhancements, implementation assistance, and new releases throughout the term of your license.