F-Response News and Blog

The source for all things F-Response

High speed and low drag, Using F-Response Universal and Volatility for rapid memory consumption

May/15/2018

Ever wanted to preview Physical Memory before you make that image? Were you one of those kids that shook the boxes at Christmas? (Perhaps you still are!) Well, you're in luck. You can leverage F-Response Universal along with Volatility to perform immediate physical memory analysis against remote…

Read more...

Accessing a remote Bitlocker volume thanks to F-Response and Dislocker

May/04/2018

Chances are you've run into this before. Remote Windows machine, you've got it mounted with F-Response and you are ready to dig right in, only to find out it's full disk encrypted. It's a common scenario with a few different potential options. Sometimes you can get around it by simply mounting the…

Read more...

F-Response Linux Fu - Your Linux Style is Strong, Make it Stronger!

Apr/10/2018

We're excited to announce that our resident Linux Master has taken it upon himself to produce a series of videos on how to leverage the new F-Response v7 (EE,CE+C,CE,TAC) Linux examiner tools for maximum effectiveness. There's a lot to cover in this first video, including: Full Deployment to Remote…

Read more...

F-Response 7.0.4.4 and Universal 2.0.1.17 Released

Apr/12/2018

We are very pleased to announce a pair of releases for F-Response products. F-Response Classic (TACTICAL, Consultant, Consultant + Covert, and Enterprise) has now been updated to version 7.0.4.4. You'll find a complete list of all the new updates under release notes on the downloads page, or in the…

Read more...

Live Forensics and High Sierra (Apple OSX High Sierra and SIP)

Feb/13/2018

Starting with the most recent release of OSX (High Sierra), Apple has elected to apply additional restrictions to applications through System Integrity Protection (SIP). Condensed to its most simple terms, these new changes mean SIP prevents applications from accessing the boot disk (rdisk0). This…

Read more...