What is new in v.1.2 of Belkasoft Remote Acquisition
The new release of Belkasoft R is aimed to improve the product stability and robustness.
Server
- Simultaneous acquisition from multiple endpoints is fixed
- A server can now prevent the operating system from going to sleep, which can prevent acquisitions otherwise (this feature works for Windows 10 only)
- Database conflict is fixed for the server update to a newer version
- Logging is improved in general to give important details to a user about an acquisition and exclude non-important ones
Agent
- An agent can now acquire folders and files even if their access is restricted (especially useful for acquiring C:, or other system drive)
- Direct disk and artifact acquisition is fixed (that is, acquisition without creating an intermediate image on a remote machine)
- Port exhausting problem is fixed that could lead to Internet connection disappearing
- An agent can now prevent the operating system from going to sleep, which can stop the acquisition otherwise (this feature works for Windows 10 only)
- Incident response-related artifacts can now be also acquired
- Archive creation is fixed to be compatible with the 7z archiver
- Agent logs are decreased in size to display only critical issues. Debug-mode logs are improved