F-Response and Cloud Server Forensics
A few weeks back we received an email from a Professional Services customer inquiring about providing Incident Response and Investigations on Cloud Hosted servers. It would seem someone else had instructed this potential customer that such a thing wasn't possible. Thankfully they contacted us, because not only is it possible, with F-Response it's actually very simple. To that end we put together a whitepaper on "Cloud Forensics with F-Response" and have posted it on our Mission Guides and Documentation page. The whitepaper covers the general concept, how to leverage tools like F-Response, X-Ways Forensics, and USB-Over-Ethernet to provide top shelf investigative services to remote virtual machines and environments. We even include an example using cloud servers hosted at Rackspace. However, the example is very straightforward and could be readily adapted to other providers (Amazon, HP, Azure, etc).
|
F-Response Boot CD Preview We've uploaded the new Boot CD to the website, you'll find it labeled " Preview F-Response Boot CD v2" on the Downloads page for your license. We've added a number of new kernel modules, updated the Linux kernel to the 3.x series, and restored the same simple boot CD process we put together for the first F-Response Boot CD a few years ago. In addition, while we can't promise it will work in every situation, we did come across a number of Apple based systems that booted fine with this boot CD, of course your results may vary, but it's certainly worth a try. You'll find the preview Boot CD on our Downloads page, be sure to have your dongle # handy to get access.
|
F-Response on LinkedIn and Twitter
We do our best to make sure all the newest updates for F-Response are available on our website, however we recommend you look at a couple of additional options for staying up with the latest on all things "F-Response". First we have a Twitter account, we tend to tweet about newsletters, blog posts, and current activities (tradeshows, etc). If you are interested in staying up with F-Response via Twitter you'll find the information you need to follow us here.
Second we have an F-Response Users Group on LinkedIn. We also post about new website updates, answer more in depth product usage questions, and participate in general live forensics discussions. If you are a LinkedIn member we recommend you consider joining the F-Response Users Group on LinkedIn.
|