Twitter Linked In


F-Response is a trademark of Agile Risk Management, LLC (Agile).

Agile's number one priority is to satisfy the needs of our clients, and we're always looking for ways to improve upon our ability to do so. F-Response is the product of that entrepreneurial spirit and drive. We realised we needed to streamline eDiscovery efforts, and provide faster incident response times. We also needed a better answer to one of many questions posed to us, such as "Can't you just give me a quick review of this guy's machine and tell me what he's been doing with my time?"

The short answer to our problem was to buy more tools; but the tools we reviewed either couldn't meet our Return on Investment (ROI) requirement or forced us to give up capabilities we enjoy with our existing arsenal. We decided we didn't need more tools; we needed to make better use of the tools we had.

F-Response is our solution.

Training & Events

Sorry there are no training Courses offered by this Supplier.


F-Response is an easy to use, vendor neutral, patented software utility that enables an investigator to conduct live Forensics, Data Recovery, and eDiscovery over an IP network using their tool(s) of choice. F-Response is not another analysis tool. F-Response is a utility that allows you to make better use of the tools and training that you already have.

The TACTICAL Edition of F-Response is our simplest and most direct version. F-Response TACTICAL uses two licensing and software dongles to facilitate the connection to the remote machine. Essentially, you connect the Examiner software dongle to your local machine, and the Subject software dongle to your remote subject machine, then execute the appropriate software on both devices. Provided you are on the same network they should be able to connect readily and provide access to the remote subject's disks, volumes, and memory.

F-Response is a forensic, e-discovery, and incident response connection and collection application. F-Response was designed to provide direct, read-only access, to remote physical machines (disks, raid, volumes, and memory) as well as remote cloud storage providers. In addition F-Response provides a clean and simple optional imaging capability for collecting F-Response presented data from multiple sources.

F-Response provides access to these remote data sources a variety of ways. For devices F-Response creates an AES 256bit encrypted and compressed connection to the remote machine and presents the drives or volumes of that machine as local, read-only, physical devices on your examiner machine.

How is F-Response TACTICAL different?
F-Response TACTICAL is the simplest and least feature rich version of F-Response. Simply put TACTICAL excels at simple non-covert connectivity to immediately access servers and workstations. Unlike other versions of F-Repsonse, TACTICAL is a dual dongle solution, meaning you will need to place a licensing dongle in both the examiner and subject machine.

F-Response Core Benefits
Full Live Read-Only Access, No File Level Locking

F-Response provides direct, live, read-only access to the remote target computer's disks, volumes, and in certain cases physical memory. Since all access is at the physical level there is no file level locking, F-Response gives you access to any and all content on the remote target, including protected system content (Registry files, Email PSTs, Database Files, etc).

Windows, Linux, and OSX Examiner Support
F-Response includes optional installation packages complete with gui tools and scriptable command line components for Linx and Apple OSX.

Optional included Imaging capability
F-Response includes an optional high speed fully scriptable imaging capability to create physical, virtual, and custom content images of F-Response presented devices and shares.

F-Response Executable and Software
The F-Response subject software functions as a single executable ("exe") on the remote target computer that requires no drivers or installation components, as well as no reboot when deployed and started. F-Response is 100% Windows 10 tested.

Industry Standard and Regulation Compliant AES 256-bit Encryption
F-Response includes industry standard support for AES 256-bit Encryption for connections. F-Response encryption is seamless and native in all versions of F-Response.

F-Response Flexdisk Support
The Flexdisk(TM)(Patented) is a web based disk access and representation tool. The Flexdisk uses standard web technologies (HTTPS/REST ) to provide direct access to the remote target machines Logical and Physical targets in both raw and logical format. The Flexdisk can be accessed and used from any modern web browser and also exposes a feature rich and extensible application programming interface (API) accessible from any system capable of making and interpreting web queries and JSON .

F-Response Targets and Platform Support
F-Response works with all RAID disks, physical drives, logical volumes, and physical memory (32 & 64 bit Windows). In addition, F-Response TACTICAL includes target executables for Windows, Linux and Apple OSX. Furthermore based on its unique vendor neutral patented design, F-Response works with all Computer Forensics, eDiscovery and Data Recovery software packages, simply put, if your package reads from a hard drive, it will work with F-Response.

F-Response Minimum Hardware Requirements (Examiner Computer)
1 Gigahertz (GHz) processor or faster, 1 Gigabyte (GB) of RAM for 32-bit or 2 GB of RAM for 64-bit systems, at least 20 Gigabytes (GB) of Disk Space.

F-Response Supports
F-Response TACTICAL supports a limited set of remote target platforms including the following:
- Windows Includes Windows XP, 2003, Vista, 2008, 7, 8, 10, 2012, 2016, 32 and 64bit, Physical memory only supported on 32bit and 64bit Windows
- Apple OSX 10.3+ (except High Sierra)
- Linux includes most Linux distributions build in the last 5 years

F-Response TACTICAL supports only the following set of remote cloud storage platforms:
- Microsoft Azure Blog Storage, Amazon Simple Software Services(S3), Rackspace Cloud Files, Dropbox, Microsoft OneDrive for Consumers, Google Drive for Consumers, Imap Email(deprecated), Gmail(OAuth)

For details on pricing for qualified individuals and organizations please contact Fulcrum with your details.

Verification Code:
Contact us
Australia:+61 (0)2 8012 9810
Singapore:+65 9297 1289
Customer Service:
Technical Support:
Training Bookings:
Register For the Fulcrum Newsletter HERE

© Fulcrum Management 2012
Verification Code:
Verification Code: