How does F-Response Universal work?
F-Response Universal uses a patent pending remote connectivity technology that enables an authenticated, read-only connection to be created between the examiner's computer and the computer(s) under inspection, over any network. F-Response Universal readily traverses most firewalls, NAT/PAT routers, and other complex networking technologies making it remarkably fast and easy to connect to remote systems almost anywhere in the world.
F-Response Universal is sold as a virtual appliance in 1 and 3 year license durations.
What are the advantages of F-Response Universal over F-Response Enterprise?
F-Response Universal provides access to remote Windows, Linux, and Apple OSX devices via the network, much like F-Response Enterprise. However, F-Response Universal does not require dongle(s), optionally integrates with most SIEM products via remote syslog, supports Active Directory authentication, provides the full deployment console to all authenticated examiners, and uses cutting edge compression to improve performance of imaging and analysis operations. In addition, F-Response Universal often does not require firewall modifications and is completely encrypted by default. For additional differences between F-Response Universal and the entire F-Response product suite see the Product Matrix.
Who would use F-Response Universal?
For E-Discovery Professionals
F-Response Universal was designed to give litigation teams extended geographic and technical reach to access unlimited live remote machines data in a completely write protected manner.
Once connected, the files and folders on remote devices are presented via a DiscoveryShare(TM), giving litigation teams the ability to review data by simply using the Windows file browser for quick review, or their litigation tools for more extensive research.
For Forensic Investigators
F-Response Universal includes access to remote physical disks, volumes, partitions, and RAID devices, allowing a Forensic examiner to leverage existing tools, techniques, and methodologies to perform investigations with pinpoint accuracy and precision.
For Incident Handlers/Responders
F-Response Universal presents remote Windows computer physical memory via the MemoryShare(TM) as a live image file, giving the handler the ability to simply collect the image file or analyze it using a popular forensics tool such as Volatility. The image file is not a snapshot of the remote physical memory, rather it represents the live physical memory of the remote machine.