F-response and Soph...
 
Notifications
Clear all

F-response and Sophos Safeguard enterprise 4-6

2 Posts
2 Users
0 Likes
471 Views
(@klobbe99)
Posts: 5
Active Member
Topic starter
 

Hi,

Does anyone out there have any experience with F-response on clients that run Sophos Safeguard enterprise, think there are versions 4-6 in the network?

Both live examination and creating an image remotely. Any input is appreciated.

Thanks in advance.

 
Posted : 04/03/2014 2:48 am
(@kbertens)
Posts: 88
Trusted Member
 

Hi,
I've got experience with f-response with Safeguard Easy.
Maybe you can describe your problem. I assume it is related to full disc encryption and "remote connection" software like f-response.

Feel free to send me a pm with your questions.
If you want to investigate an encrypted HD with f-response, make sure you investigate the logical drive, the physical HD will be encrypted.
Of course you're able to make an image of the physical drive, but you need to decrypt it first before you can investigate the drive.
I don't know if Encase supports Safeguard Enterprise, but Im sure they support Safeguard Easy.

 
Posted : 04/03/2014 1:41 pm
Share: