Digital Forensics and Incident Response - Second Edition

F-Response

Another option that is available to incident response analysts is the use of the F-Response tool. F-Response is a software platform that allows incident response analysts to perform remote acquisition of evidence over a network. One advantage of utilizing F-Response is that it does not require direct access to the remote system via SSH or RDS. Another key feature of F-Response is that the tool is designed to establish a connection while allowing the incident response analyst to utilize their preferred tools to perform the acquisition. Information on the F-Response product is available at https://www.f-response.com/buyfresponse/software.

In the following example, F-Response is being utilized to connect to a system that is suspected ...