F-Response TACTICAL

What is F-Response TACTICAL?

The TACTICAL Edition of F-Response is our simplest and most direct non-covert version. F-Response TACTICAL uses two licensing and software dongles to facilitate the connection to the remote machine. Essentially, you connect the Examiner software dongle to your local machine, and the Subject software dongle to your remote subject machine, then execute the appropriate software on both devices. Provided you are on the same network they should be able to connect readily and provide access to the remote subject's disks, volumes, and memory. It creates live, read-only devices on your local examiner machine suitable for forensic analysis, collection, and/or review.

Still not sure? You'll find a video of F-Response TACTICAL in action below.

See F-Response TACTICAL in Action

How does F-Response TACTICAL work?

F-Response TACTICAL uses a patented remote connectivity technology that creates an authenticated, read-only connection between the examiner's computer and the computer(s) under inspection over any network. F-Response presents the drives, volumes, or memory (Windows only) of that machine as local, read-only, physical devices on your examiner machine.

Who would use F-Response TACTICAL?

For Forensic Investigators

F-Response TACTICAL includes access to remote physical disks, volumes, partitions, disk devices, allowing a forensic examiner to leverage existing tools, techniques, and methodologies to perform investigations with pinpoint accuracy and precision.

F-Response TACTICAL Benefits

Full Live Read-Only Access, No File Level Locking

F-Response TACTICAL provides direct, live, read-only access to the remote target computer's disks, volumes, and in certain cases physical memory. Since all access is at the physical level there is no file level locking, F-Response gives you access to any and all content on the remote target, including protected system content (Registry files, Email PSTs, Database Files, etc).

Optional included Imaging capability

F-Response includes optional high speed imaging (Physical images in Expert Witness "E01" format only).

F-Response Executable and Software

F-Response functions as a single executable ("exe") on the remote target computer that requires no drivers or installation components, as well as no reboot when deployed and started. F-Response is 100% functional with the latest versions of Microsoft Windows.

Security

All subject data in transit when using F-Response TACTICAL is encrypted using AES 256 bit symmetric encryption.

Cloud Files Collection

F-Response TACTICAL includes support for collecting cloud data from the following providers: Azure Blob Storage, Amazon Simple Storage Services(S3), Box.com for Consumers, Dropbox for Consumers, OneDrive for Consumers, Google Drive for Consumers, Google Mail for consumers. For more details on F-Response's specific Cloud Files collection options, please see the appropriate Mission Guide on our Mission Guides and Documentation page.

Licensing and Usage

F-Response TACTICAL is sold in 1 and 3 year license terms. F-Response TACTICAL is limited to a single connection at any given time.

Buy F-Response TACTICAL

F-Response TACTICAL is available in 1 and 3 year license terms and can be purchased directly from F-Response.com. Buy F-Response TACTICAL.

IMPORTANT NOTE: Always remember, all renewal prices are available here on our website, and all licenses of F-Response automatically include maintenance, support, online training, enhancements, implementation assistance, and new releases throughout the term of your license.