F-Response on YouTube (Revised)

Aug 18, 2009

Aaron Wade has posted a very interesting video of the F-Response Field Kit in action on YouTube.

After some commentary and review he's updated the video to show direct live registry access on a remote machine running the F-Response Field Kit.

 

 

 

Essentially Aaron is using Harlan Carvey's RegRipper tool against a remote registry, this is made possible because F-Response works at the physical disk level, as such Aaron is able to access "protected" system files such as the registry without issue.

Thanks for putting this video together Aaron, it's a great way to show one of the many potential uses of F-Response.

Aaron's Blog -> ForensicIR.Blogspot.com

Harlan Carvey's Blog & RegRipper -> WindowsIR.Blogspot.com

F-Response Field Kit Edition

 

- M Shannon

Founder- F-Response