First Responder's Evidence Disk - Revision history

Vesh: Editing for specificity on what has been disabled/removed

2011-11-01T12:37:35Z

Editing for specificity on what has been disabled/removed

Vesh: /* External Links */

2011-05-15T21:11:26Z

‎External Links

Vesh: Changed File Link

2011-01-20T21:59:50Z

Changed File Link

Vesh: removed unecessary signature

2011-01-11T02:51:32Z

removed unecessary signature

Vesh: Added a download link to FRED

2011-01-11T02:50:57Z

Added a download link to FRED

Jessek: /* History */ - Updates based on consult with AFCERT

2010-10-29T14:07:04Z

‎History: - Updates based on consult with AFCERT

Vesh: Added something to try to squelch the citation needed, but it's hard since I can't post source or the actual new executable. I would love to, but I can't at this moment.

2010-10-28T19:22:19Z

Added something to try to squelch the citation needed, but it's hard since I can't post source or the actual new executable. I would love to, but I can't at this moment.

Jessek: /* History */ - Added citation needed tag

2010-10-04T19:40:40Z

‎History: - Added citation needed tag

Vesh: /* History */

2010-10-02T17:43:35Z

‎History

Vesh: /* History */

2010-10-02T17:40:19Z

‎History

@@ Line 13: / Line 13: @@
 There was a proposal for a program to process the audit files into [[HTML]], but this never came to fruition.
-Since 2004 FRED has been maintained by the [[Air Force Computer Emergency Response Team]]. The current version of FRED (version 4) has been redesigned as a single executable, with remote collection capabilities, and uses Native API functions. The audit file uses PKI for encryption to protect the contents from tampering and disclosure. The publicly available version has remote functionality, and PKI encryption capabilities removed.
+Since 2004 FRED has been maintained by the [[Air Force Computer Emergency Response Team]]. The current version of FRED (version 4) has been redesigned as a single executable, with remote collection capabilities, and uses Native API functions. The audit file uses PKI for encryption to protect the contents from tampering and disclosure. The publicly available version has the remote functionality as well as the PKI encryption capabilities turned off.
 == Trivia ==

@@ Line 27: / Line 27: @@
 ; [[FRED]]
-: http://www.box.net/shared/6oslti78bn
+: http://darkparticlelabs.com/portfolio.php
-: Hopefully this link stays pretty persistent since it is my box account [[User:Vesh|Vesh]].
 [[Category:Incident response tools]]

@@ Line 27: / Line 27: @@
 ; [[FRED]]
-: http://www.box.net/shared/xu0hag8sya
+: http://www.box.net/shared/6oslti78bn
 : Hopefully this link stays pretty persistent since it is my box account [[User:Vesh|Vesh]].

@@ Line 28: / Line 28: @@
 ; [[FRED]]
 : http://www.box.net/shared/xu0hag8sya
-: Hopefully this link stays pretty persistent since it is my box account [[User:Vesh|Vesh]]vesh.
+: Hopefully this link stays pretty persistent since it is my box account [[User:Vesh|Vesh]].
 [[Category:Incident response tools]]

@@ Line 13: / Line 13: @@
 There was a proposal for a program to process the audit files into [[HTML]], but this never came to fruition.
-Since 2004 FRED has been maintained by the [[Air Force Computer Emergency Response Team]] and is not publicly available. The current version of FRED (version 4) has been redesigned as a single executable, with remote collection capabilities, and uses Native API functions. The audit file uses PKI for encryption to protect the contents from tampering and disclosure.
+Since 2004 FRED has been maintained by the [[Air Force Computer Emergency Response Team]]. The current version of FRED (version 4) has been redesigned as a single executable, with remote collection capabilities, and uses Native API functions. The audit file uses PKI for encryption to protect the contents from tampering and disclosure. The publicly available version has remote functionality, and PKI encryption capabilities removed.
 == Trivia ==
@@ Line 23: / Line 23: @@
 * [[IRCR]]
 * [[COFEE]]
 [[Category:Incident response tools]]

@@ Line 15: / Line 15: @@
 Since 2004 FRED has been maintained by the [[Air Force Computer Emergency Response Team]] and is not publicly available.
-The current version of FRED (version 4) has been redesigned as a single executable, with remote collection capabilities. The audit file uses PKI for encryption to protect the contents from tampering and disclosure.{{citation needed}}
+The current version of FRED (version 4) has been redesigned as a single executable, with remote collection capabilities. The audit file uses PKI for encryption to protect the contents from tampering and disclosure. Contact ForensiksWiki User Vesh for further information about FRED version 4.
 == Trivia ==

← Older revision		Revision as of 17:40, 2 October 2010
Line 14:		Line 14:

	Since 2004 FRED has been maintained by the [[Air Force Computer Emergency Response Team]] and is not publicly available.		Since 2004 FRED has been maintained by the [[Air Force Computer Emergency Response Team]] and is not publicly available.
		+
		+	The current version of FRED (version 4) has been redesigned as a single executable, with remote collection capabilities.

	== Trivia ==		== Trivia ==