it can be used against anything that has a drive letter in windows, so it does serve as both a live response and dead box searching platform.
ideally plugins will get the same data whether live response or not, but sometimes thats just not possible (like running processes, etc).
↧