F-Response 8.7.1.9/8.7.1.11 - Collect, Compute, and More

Oct 19, 2023

We're happy to announce the latest update to F-Response.

Always remember you can click here to jump straight to the downloads page and get the latest, or read on for more details.

First and foremost, we hope this message finds you well.

The bulk of the updates in this release center around F-Response Collect, but just about every part of the F-Response software family gets in on the action with 8.7.1.9/8.7.1.11.

First, let's cover the updates to F-Response Collect. We've put in a lot of work on all the subjects for Collect: Windows, Linux, and OSX. We've improved the robustness of collection operations across all three, and moved to a more extensible custom/profile collection format. This new format allows us to add additional metadata options in the future without breaking any existing extraction processes. (Including adding new date fields specific to different platforms).

More than that, we've improved the network error handling to reduce the incidence of restarts and added full MD5 and SHA1 hashing for all collected files.

This does mean that we had to change the way we do restarts vs resumes depending on collection targets. Simply put, F-Response Collect will resume device target collections (disk, volumes, physical memory). It will restart logical file collections (profiles, custom collections, MFTs).

We're very excited about these new improvements and made sure to wrap them up with a number of bug fixes. The full release notes has all the details.

Not to be left behind, Classic F-Response and Universal, as well as Collect now include a new Cloud Server platform. Starting in 8.7.1.9/8.7.1.11 we've added support for collecting server volume snapshots from Google Compute. Just like Azure and Amazon, you will need sufficient credentials, however once you've got those configured, you should be able to locate, snapshot, and image volumes from Google Compute server instances.

You'll find more details in the newest Mission Guide for Google Cloud Platform.

Thanks for reading. Don't forget, if you are interested in seeing any version of F-Response in action and digging into the gritty details, don't hesitate to contact us to arrange a GoToMeeting demo.

Warmest Regards,

M Shannon