CSS Cascade Menu by Css3Menu.com

CSS Cascade Menu by Css3Menu.com

FORENSIC IMAGING HARDWARE

We use a multitude of dedicated high-speed forensic drive duplicators to collect data and make forensic copies of suspect drives. Although they tend to be expensive, their speed and efficiency cannot be matched by any other method. A write-blocked laptop computer may be good enough for quick on-site review, however, it is not an optimal solution for image acquisition. Even the slowest dedicated duplicator is at least five times faster than the best amateur setup -- a write-blocked computer. In addition, similar to forensic software, different brands of forensic hardware excel under different circumstances. Consequently, we have forensic drive duplicators from all major manufacturers in multiple numbers. Having this level of superior resources allows our investigators to image dozens of computers at a time, reducing time spent at client locations and affording the capability of collecting from a large number of computers efficiently.  

Tableau TD1

The Tableau TD1 is a "forensic duplicator". As a forensic duplicator, the TD1 has many of the functions traditionally found in duplicators for the general IT market. In addition, the TD1 has features and capabilities that make it very good at handling the special needs of forensic practice. Like any good IT duplicator, the TD1 is very fast, sustaining data rates up to 6 GB/minute. The TD1 is also versatile, having native support for both SATA and IDE hard disks on both the input (source) and output (destination) interfaces. The TD1 also has features uniquely valuable in forensic applications. One of the most important of these features is the ability to calculate MD5 and SHA-1 hash values – sometimes called Fingerprints – for the data being duplicated without slowing the Duplicator. Other forensic features include detailed log generation (useful for case documentation), automatic blank-checking of source and destination drives, detection and handling of hidden/protected data areas on source and destination drives (HPA & DCO support), etc.

Image MASSter Solo 3

Designed exclusively for forensic applications, the Image MASSter Solo-III Forensics system is a lightweight, portable, handheld, high-speed data acquisition device. Suspects` data can be seized at speeds exceeding 3 GB per minute (transfer rates are dependent on the model of drives used). Using the unit's on-the-fly hashing capabilities, the transferred data can be guaranteed to be an exact replica of the suspect`s data without modification, re-arrangement or corruption. The suspect's data can be seized using the unit's direct drive to drive interface or by using the unit's external Firewire/USB interface to seize data from a suspect's unopened PC. The IMSOLO-III Forensics unit supports seizing from IDE, Serial ATA and SCSI hard disk drives, including ATA compatible solid state devices.

Tableau TD2

Built on the strength and reputation of Tableau's venerable TD1, the Tableau TD2 Forensic Duplicator delivers advanced functions and exceptional performance in a compact, durable and easy-to-use package. This second-generation product was engineered for standalone forensic acquisitions in both field and lab settings, natively imaging both SATA and IDE/PATA hard drives at speeds up to 9GB/min. Utilizing the same protocol modules as TD1, investigations can (optionally) include USB and SAS suspect drives

Voom HardCopy

Voom HardCopy is a Portable Hard Drive Forensic Duplicator that operates up to 7 GB/minute. It combines cutting-edge forensic HDD duplication and wipe capabilities with a built-in hardware write-blocker. The HardCopy is designed with dual-pass verify (runs hash algorithm during data transfer and then runs algorithm on destination read), can handle clones (disk to disk) or images (disk to file(s); dd “flat” files), and is preloaded with both MD5 and SHA256 verify.

Tableau TD3

The TD3 is truly one of a kind. At its core, the TD3 is a high performance, reliable, and easy to use forensic duplicator - with a high resolution, touch screen User Interface (UI). Today, the TD3 is capable of forensic data collection from SATA, IDE, USB 3.0/2.0/1.1, SAS, and FireWire (1394A/B) drives. No other forensic duplicator available today matches the TD3 for its unique combination of performance, packaging, forensic capabilities, and usage models.

 

CRU Ditto Forensic Workstations

The hand-held Ditto Forensic FieldStation travels with a technician for use in creating disk clones and images. The Ditto FieldStation can also log user activity and maintain chain of custody while using forensic (write-blocked) methods. This time- and money-saving capability expediates the process of data capture, as well as allow investigators to optimize staffing and deployment. Unlike many other imaging tools, the CRU Ditto allows us to image a hard drive and save it our mobile collection units.

 

 

 

 

 

 

 

 

Tableau Write Blocks

Write blockers are devices that allow acquisition of information on a drive without creating the possibility of accidentally damaging the drive contents. They do this by allowing read commands to pass but by blocking write commands. Tableau is the only company which makes products for all three common drive interfaces: IDE, Serial ATA, and USB. They are built to keep pace with advances in I/O and storage technologies. The new USB 3.0 bridges offer exceptional performance, ease of use, and superb reliability. Tableau legacy bridges are examiner proven and remain core products in our forensic kits. We utilize write blockers to preview suspects' computers on-site, however, if needed, our collection of write blocks, used in conjunction with our response laptops, allows us to image an additional ten computers simultaneously.