Hmm, seems to be some confusion here, let me clarify a few things.
F-Response uses a dongle to provide licensing, however the placement or location of that dongle varies depending on the version in use.
In the Field Kit version of F-Response the dongle must be physically connected to the subject computer or computer executing F-Response.
However, in the Consultant and Enterprise edition of F-Response the dongle is not connected to the subject computer, it is instead connected to your local analysis workstation or a central server.
The best way to get a feel for F-Response is to watch the videos on our website, be sure to turn on your speakers as there is an audio commentary that explains the process.
F-Response Field Kit Video
http//
F-Response Consultant Video
http//
F-Response Enterprise Video
http//
With all of that being said we are looking at various options for F-Response Enterprise software delivery, either through AD, psexec, logon scripting, or other options. We'll most likely post something on the Founder's Blog at
Thanks again, and by all means if you have further questions please don't hesitate to PM or email me directly (sales _at_ f-response.com).
Warmest Regards,
M. Shannon
George,
If you have an admin username/password for the system, you can install and launch F-Response Enterprise remotely, using psexec.exe.
You are able to push a USB dongle out to a remote machine using psexec?
You don't need to push a dongle out with the Enterprise version.
In the Field Kit version of F-Response the dongle must be physically connected to the subject computer or computer executing F-Response.
Can we attach the dongle on any of these machines?
Sorry.i watched the video but still in confusion.
what have we done..the http//
Can we attach the dongle on any of these machines?
F-Response Field Kit - Dongle attaches to the suspect computer.
F-Response Consultant - dongle attaches to local analysis workstation or a central server.
F-Response Enterprise - dongle attaches to local analysis workstation or a central server.
Just about everything is back up and running, we moved servers overnight, sorry for the inconvenience.
Now, getting back to your question, ganron, for the Field Kit edition the answer is both, the workstation/server that you are executing F-Response on is the target of your investigation and requires the F-Response Driverless dongle be plugged into it directly.
The Consultant and Enterprise editions use a special dongle network server that runs on your analysis machine, by using this dongle server you can execute F-Response Consultant or Enterprise edition on multiple remote machines without requiring a locally connected dongle.
Does this make more sense?
If not, please don't hesitate to contact us directly at sales _at_ f-response.com.
Warmest Regards,
M Shannon
That was the clearest description of the dongle use.
F-Response is really simple to use, however the 'neat factor' is huge. I used it recently on a case that worked well for several reasons. 1) it's neat. 2) no travel. 3) got to stay in the office and use X-Ways like it was an 'enterprise edition hex editor on steroids'.
I have to say that although it is easy to use, Matt Shannon did offer to hold me hand to walk me through using F-Response. With some of the tools out there, you won't have many of them offer such support with a direct phone call. (and no, he didn't hold my hand, but the offer made me feel better…).
Thanks Brett, we appreciate the kind words.
M Shannon
F-Response
I have to agree. This product is awesome and very easy to use. I'm glad I can use this to save me travel time on small image jobs. It's very much worth the low cost.
I attempted to send this question via the online form on the website but it blew up and I am not sure it is sent.
I may need to acquire the databases from a live MS Exchange server. I use Encase and want to bring them in as logical evidence files. Which should be no issue if the server drive shows up on my acquisition computer.
Has F-Response been tested against a live Exchange server? How safe is it? Exchange is very sensitive and will corrupt the data store if you are not very careful.