F-Response Enterprise Edition v3.09.09
Strengths: Outstanding customer support and robust documentation.
Weaknesses: Takes a bit of extra effort to learn.
Verdict: A highly useful and well-thought-out product with excellent support and a great tutorial Q&A to make setup and use a breeze.
SummaryThe F-Response Enterprise Edition forensic tool makes examinations in the corporate world much easier. The tool allows users to access devices on a network and map them for examination with other forensic tools. This tool is compatible with Windows, Mac and Linux, making it very versatile, plus it greatly simplifies capturing an image across a network. It also works as a write blocker, which is a big plus.
To use the tool, one scans a network for connected devices and then installs a client on a chosen target. Once this is installed, one may then access the device with another forensic tool. The user interface was a little difficult to navigate initially. However, a free, live tutorial Q&A is offered for all Enterprise customers. This made it much easier to understand and set up the tool.
The standout feature is the built-in write blocking. One of the trickiest parts of image capture is making sure the disk is exactly the same as when the user received it. Having a tool that will not only map a network device but also write block it is incredible. F-Response is not tied to a specific forensic tool, allowing users to implement it with their current forensic tools. It also works in a virtual environment, another bonus.
The maker offers a robust library of PDF guides and product documentation on its website. All of this is downloadable before installing the product, which is very useful during setup. The documentation is clean and straightforward and offers many screen shots.
Support comes as live online chat, phone and email.
At $4,990, the F-Response Enterprise Edition is a bit pricey but worth every penny for what one gets in return.