Networked & Live Data

Today's 24/7/365 global economy often does not allow for server downtime to undertake typical forensic collections, nor do many court mandated deadlines allow enough time to collect data at geographically dispersed locations.

Our data collection teams are able to remotely capture live data - including RAID disks, physical drives, logical volumes, and physical memory (32 & 64 bit Windows) - in a forensically sound manner via IP network connection. We can connect to a target device, whether it is a server located downstairs in the corporate data center or a PC in a remote office halfway around the world, as long as there is connectivity within the corporate network.

Target environments supported include:

  • Windows: 2000, XP, 2003, Vista, 2008, & 7, 32 and 64bit, Physical memory only supported on 32bit and 64bit Windows
  • Apple OSX: OSX 10.3,10.4,10.5,10.6 Universal Binary, *FK only supports Intel Apple OSX
  • Linux: most Linux distributions build on Glibc 2.3.5 and higher, Android on ARM, and Embedded Linux
  • Solaris: Solaris 8, 9, & 10 on SPARC and OpenSolaris on Intel
  • IBM AIX: AIX 5.1,5.2,5.3,6.1 on the Power processor
  • HPUX: HP_UX11iv2,11iv3 on the Itanium processor
  • FreeBSD: AIX 7 on the Intel/i386 processor
  • SCO: SCO OpenServer 6 and Unixware 7 on the Intel/i386 processor


digital investigations

Data Collection

  • Forensic Imaging
  • Remote Collection
  • Mobile Devices
  • Learn More

Data Analysis

  • Computer Forensics
  • Early Case Assessment
  • Advanced Text Analytics
  • Learn More

Data Processing

  • Cloud E-Discovery
  • PST Mailbox Discovery
  • Mobile Onsite E-Discovery
  • Learn More

Document Review

  • Secure Cloud Hosting
  • Global Web Access
  • Cloud Productions
  • Learn More