e-fense Live Response

Site Admin Joined: Aug 18, 2004 Posts: 969

Please use this thread for discussion of the "e-fense Live Response" review.

Newbie Joined: Nov 15, 2006 Posts: 10 Location: boston

I want to thank Scott Wesner for taking the time and interest to write a comprehensive review. The detail and images are very helpful in understanding the product. This reviewer, the other reviewers, and all the forum posters, make this forum what it is.

Site Admin Joined: Aug 18, 2004 Posts: 969

Many thanks, ballydehob, I'll pass that on to Scott.

Jamie

Newbie Joined: May 14, 2009 Posts: 2 Location: Quebec

Thanks for the good review! Cool

Do you know if the tool respect the order of volatility: memory acquisition first, network state acquisition, process... and non-volatile data (like registry information) at the end?

Posted: Fri May 15, 2009 6:33 am Post subject: Re: e-fense Live Response

They have a screen captured video that might have it shown in the demo:

www.e-fense.com/video-...ration.php

Newbie Joined: May 14, 2009 Posts: 2 Location: Quebec

Thanks for the video link

On the video, the order of volatility seems to be not respected: Process and services are acquired after non volatile data (registry and USB storage infos).

Posted: Fri May 15, 2009 10:24 am Post subject: Re: e-fense Live Response

Our firm will be getting it in the next week or so - if the topic is still open I will post the results.