Networked & Live Data
Today's 24/7/365 global economy often does not allow for server downtime to undertake typical forensic collections, nor do many court mandated deadlines allow enough time to collect data at geographically dispersed locations.
Our data collection teams are able to remotely capture live data - including RAID disks, physical drives, logical volumes, and physical memory (32 & 64 bit Windows) - in a forensically sound manner via IP network connection. We can connect to a target device, whether it is a server located downstairs in the corporate data center or a PC in a remote office halfway around the world, as long as there is connectivity within the corporate network.
Target environments supported include:
- Windows: 2000, XP, 2003, Vista, 2008, & 7, 32 and 64bit, Physical memory only supported on 32bit and 64bit Windows
- Apple OSX: OSX 10.3,10.4,10.5,10.6 Universal Binary, *FK only supports Intel Apple OSX
- Linux: most Linux distributions build on Glibc 2.3.5 and higher, Android on ARM, and Embedded Linux
- Solaris: Solaris 8, 9, & 10 on SPARC and OpenSolaris on Intel
- IBM AIX: AIX 5.1,5.2,5.3,6.1 on the Power processor
- HPUX: HP_UX11iv2,11iv3 on the Itanium processor
- FreeBSD: AIX 7 on the Intel/i386 processor
- SCO: SCO OpenServer 6 and Unixware 7 on the Intel/i386 processor
