Mandiant First Response

Mandiant First Response is a free software solution for incident responders that provides an efficient toolkit for collecting and analyzing critical data following a suspected computer security event. MFR provides the ability to remotely collect the volatile data that allows organizations to perform precision strike responses when an incident occurs. Information from file listings, system registries, running processes and services, event logs, and many other data sources can now be centrally gathered and rapidly reviewed to validate a computer security event. The software is comprised of a deployable Agent that gathers relevant forensic data from target systems, and a centralized Console for command, control, and analysis functions. Data acquisitions can be performed locally or via a network connection, providing investigators with the necessary flexibility to conduct forensic operations in a variety of environments.

Version 1.1.1 addresses various bugs in the MFR Agent, as well as a bug in the MFR Console that was preventing generation of plaintext reports.