Hi,
Does anyone out there have any experience with F-response on clients that run Sophos Safeguard enterprise, think there are versions 4-6 in the network?
Both live examination and creating an image remotely. Any input is appreciated.
Thanks in advance.
Hi,
I've got experience with f-response with Safeguard Easy.
Maybe you can describe your problem. I assume it is related to full disc encryption and "remote connection" software like f-response.
Feel free to send me a pm with your questions.
If you want to investigate an encrypted HD with f-response, make sure you investigate the logical drive, the physical HD will be encrypted.
Of course you're able to make an image of the physical drive, but you need to decrypt it first before you can investigate the drive.
I don't know if Encase supports Safeguard Enterprise, but Im sure they support Safeguard Easy.