F-Response Consultant + Covert
Featured
Investigations requiring both covert and non-covert access
A single covert remote connection at a time
Unlimited non-covert remote subject connections
Live, read-only access to remote disks, volumes, and memory
Investigators using multiple forensic analysis tools
Collection from cloud storage, cloud servers, and network shares
Organizations requiring a completely dongleless deployment
Detached, automatically resumable collection from off-network systems
Built-in artifact parsing, analysis, or report generation
Simple on-site acquisition involving only one system
Mobile-device extraction or phone unlocking
F-Response Consultant + Covert provides live, read-only access to remote evidence for consultants and internal investigation teams that need both standard and covert connection options. It supports unlimited non-covert subject connections together with one remote covert subject connection at a time.
The platform creates authenticated connections over LAN and WAN networks and presents remote disks, volumes, and supported Windows physical memory to the examiner as locally accessible devices. Investigators can then use compatible forensic applications for collection, review, and examination without being limited to a single analysis ecosystem.
F-Response Consultant + Covert also supports collection from SMB and SFTP network shares, supported cloud-storage services, and server volumes hosted in Amazon EC2 and Microsoft Azure. Its single covert connection makes it suitable for teams that need covert capability but do not require the unlimited covert deployment provided by F-Response Enterprise.
F-Response Consultant + Covert is a paid, vendor-neutral platform combining unlimited non-covert remote access with one covert connection at a time.