|F-Response Flexdisk® PatentedWe are very pleased to announce the award of our second patent for the F-Response Flexdisk® forensic web service.
"This most recent patent award underscores our commitment to cutting edge live and remote forensics." says Matthew Shannon, Principal and Chief Software Architect.
For more information on the F-Response Flexdisk® click here, or to get started with the API click here.
F-Response at CEIC 2012, Summerlin, NV
We are still unpacking from yet another great CEIC show. It was great to meet and greet our existing customers and show off F-Response (including a sneak peek at 4.0.4) to a host of new attendees and investigators.
Also we are very pleased to hear that next year's CEIC is returning to Orlando, FL. We hope you'll be in attendance next year so we can welcome you to our home state.
|F-Response and Full Disk Encryption
We were recently contacted by a potential client looking to test out the features of F-Response Enterprise, specifically with regards to accessing remote Apple OSX machines with Check Point Endpoint Security - Full Disk Encryption 3.3.2.
It appears Check Point Endpoint Security Full Disk Encryption creates a series of secondary raw disk (rdisk) devices on the target computer, once successfully authenticated the root filesystem is mounted via one of these non-standard devices. In this case it was a simple a matter to add the appropriate device to the custom options for F-Response Enterprise ( also covered as the "-a" command line option, more details here).
In the end F-Response Enterprise was able to provide direct, read only, forensically sound access to the remote Apple OSX un-encrypted disk with minimal effort.
Having issues with your own internal full disk encryption products? Contact us and see if F-Response Enterprise can solve your problem, we'll gladly setup a GoToMeeting demonstration and trial to help you find out!