The SuperImage application can achieves in one read pass over from the Suspect hard disk drive: (SIF-0018) Features:

Transcription

1 SuperImager 8 Forensic Field Unit i7 Edition Complete Computer Forensic Mobile Unit 4 SAS, 6 USB3.0 Ports, Touchscreen Color LCD Display (Internal SSD 256GB) (SIF-0018) The SuperImager 8 field unit is a high speed compact computer forensic data acquisition unit/forensic imager with the use of multi core i7 CPU and featuring four 6Gbit/s SAS/SATA interface ports and six USB3.0 ports. The unit supports multisource to multi-target simultaneous operation The SuperImage application can achieves in one read pass over from the Suspect hard disk drive: Forensic Imaging E01 with very little speed degradation, calculates 3 hash value (MD5, SHA-1, SHA-2), Encrypts the Suspect data with AES256, performs a Binary Key Word Search, Saves Forensic Images to 3 locations at the same time 2 Evidence Hard Disk Drives + USB/e-SATA External TB RAID storage + Local Network Features: Case: Mobile, rugged, easy to carry Display: 8 (800X600) LED backlight Touchscreen color LCD display Speed: Externally fast; Hash verification operation SHA-1 top speed can reach 30GB/min with Solid State Drive and 10GB/min with 1TB WD Blue SATA-3 Hard Disk Drive. Forensic Imaging of 1:2 with SHA-1 enabled can perform at 29GB/min with 3 SSD SanDisk Extreme II 128GB Secure DC-in connection: Built with Keyed and Locked DC-in connection to avoid accidental disconnect in the middle of the operation

2 GUI: The application is built with large icons and very simple and easy to navigate Writes Block: A low level blocking mechanism for both device drives and hardware Hash: On-the-fly simultaneously Hash MD5/SHA-1/SHA-2 (SHA-1 CPU accelerated) Encryption: On-the-fly AES256 encryption of the "Suspect" Hard Disk Drive and saves the encrypted data on "Evidence" Hard Disk Drive in 100%, DD E01/Ex01 formats Keyword Search: Instantaneous binary keyword search on the Suspect Hard Disk Drives (not a Unicode match) Forensic Images can be saved in those Formats: 100% Bit by Bit, Linux DD Format, Encase E01/Ex01 formats include option for optimized compression (With very little speed degradation) Forensic Images Destination: User can saves Images to a local network shared folder for easy access and analysis, or save images to external USB3.0 RAID storage in a very good speed Network Capture: Data from network folder can be captured via iscsi protocols Captured Interfaces: SAS, SATA, e-sata enclosures, IDE, USB2.0, USB3.0, MMC, 1394*, and SCSI*. Form Factors: Capture from various form factor devices: 3.5, 2.5, ZIF, 1.8, Micro-SATA, Mini-SATA, PCIE*, Mini PCIE*, M.2(NGFF)* File Preview: Browse and preview captured data on the Internal Display by mounting the Hard Disk Drive under Windows, and then using Windows Explorer or any other third-party view applications. OS: Windows Embedded Standard 7 platform allows the running of other applications including cell phone acquisition software in parallel with a capture operation, and other Forensic analyses applications like Encase, Nuix, and FTK Cross Ports Copy: The user can choose to capture from one type of Storage interface and save the Forensic Images into a different Storage interfaces. Cross copy data can be between SAS/SATA/IDE and USB interfaces. Capture Data from the Internal Hard Disk Drives of a Laptop: Captured via USB or Gigabit Ethernet ports of the laptop/computer without the need of disassembling the said unit Parallel Forensic Imaging: Modes 1:1, 1:2, 1:3, 2:2, 2:3, and more possibilities all in a simultaneous operation. The 2:2 mode needs to be run in two separate sessions of 1:1. The 2:3 capture mode uses the e-sata port but user needs to supply power to this port. The 1:3 capture mode needs to be configured at time of purchasing of the main unit. The 2:5 mode will use 2 USB3.0 to SATA adapters

3 More Ports for Forensic Imaging: With the use of few USB3.0 to SATA adapters and with the use of e-sata port, the unit can support up to 2:7 Forensic Imaging of SATA HDD With the use of express port option enabled and the optional Sonnet 4 SAS Ports Express Card Adapter, the unit can support up to 2:6 Forensic Imaging of SAS HDD Erase Hard Disk Drive: Use DoD M, Security Erase, or define your own pattern and numbers of iterations (Security Erase and DoD protocols are NITS compliance) HPA/DCO Automatic Supports: The application has the ability to automatic open HPA and DCO areas and resize the Suspect hard drive to its full native capacity in order to capture any hidden data (HPA/DCO are special areas that user can set on the Suspect hard disk drive) Bad Sectors Handling: User can select to skip bad sectors/blocks, or abort the operation when it encounters a bad sectors/block of sectors on the Suspect hard disk drive Quick Format HDD: Support NTFS, FAT, and exfat Logs and certification: The application generates extensive logs and erase certification (NIST format) that are easy to export to USB thumb drive Parallel Forensic Imaging - Multiple Session Operations: User can run a multiple efficient parallel operation as many ports are available.(no limitation on the number of running sessions) user can mix different type of operations, each operation can be as a new independent session such as erase a drive on one port, hash verify on second port, while imaging 1:1 with the leftover 2 ports Hardware: Very high quality high preforming component with military specifications. The units are assembled and tested in the USA Hardware upgrade: If user needs more calculation power, like Nuix indexing, mostly when running a third-party analysis tools, the unit can be upgraded at time of purchasing for additional cost, to a CPU that is faster and have more cores, a large internal SSD, and 16GB of DDR3 memory Platform: The unit has high performance when running a third-party application: Cellphone and Tablets data extraction and analysis with the use of application such as Cellebrite/BlackBag/MPE+/Oxygen/Paraben/XRY, Triage application such as Nuix/Encase Express Card Port Option: An optional port that needs to be installed at the time of purchasing of the main unit. This additional port gives the user the ability to plug and use a few kinds of Express Card adapters with different interfaces, and Express Card Media. The user can also capture data from those additional new interfaces and devices. A dual port 1394A/B, PCIE memory (Sony SxS), Mini PCIE SSD (That are not supported by SATA protocol) Expansion Port: An optional port that needs to be installed at the time of purchasing of the main unit. (The user can choose to configure the main unit with only one connectivity port: Express Card Port or Expansion Port). This additional expansion port gives the user the ability

4 to plug and use Expansion Box with express card reader pre- installed and ability to support capture of data from SCSI Hard Disk Drive (With the purchasing of the SCSI 2 Hard Disk Drives Option Kit) * Expansion ready unit. Hardware specifications: CPU: 4 th Generation i7 up to 4.0GHZ RAM: 16GB internal memory Internal Storage: 256GB msata SSD Storage Controller: PCI Express 2.0 SAS/SATA controller supporting 6Gb/s SAS/SATA interface speeds with maximum data rate of 37GB/min Front Panel ports: Four SAS/SATA power and data combo ports (two for Suspect and two for Evidence ). Supplied cables include a locking mechanism Two USB3.0 ports (For Suspect ) Back panel ports: Two HDMI Ports (HDMI out for external display and HDMI in for input like DVD players ) 1Gigabit Ethernet port for network connectivity and remote data acquisition from un-open PC or laptop 5 Audio port and one S/PDIF Optical Audio port Four USB3.0 ports (2 Ports are for Evidence and 2 ports are Generic use) Two USB2.0 ports (generic use) e-sata 6Gbit/s port for external storage (hot plugged) for DVD Power characteristics: Supplied universal auto switching 150W UL/CE/PSE approved external power adapter Input voltage: V/50-60Hz Power consumption excluding external drives: 88W Operating environment: 5 C - 55 C (40 F-130 F), relative humidity: 20-60% non-condensing Mechanical characteristics: Overall Dimensions: 10.6 x 3.8 x 7.7 inch (270 x 98 x 194 mm) Net Weight: 6.00 lbs. Included items:

5 One SATA to 40-pin IDE adapter One Mini-SATA adapter One 2.5 IDE 44-pin adapter One Micro SATA adapter One Soft carry case Four SAS/SATA combo cables with locking mechanism USB keyboard and touchpad combo Option items: Remote capture kit via USB and 1Gigabit Ethernet ports Unit s Metal Stand (2 Options) Mobile, Compact RAID storage (Encrypted optional) Hard Case SATA to M.2(NGFF) adapter USB3.0 to M.2 (NGFF) adapter Mini-PCIE to M.2(NGFF) adapter to support SSD not support by SATA protocol (with the use of Express Port option) 3 different kits with accessories and options USB3.0 to e-sata adapter The unit has 2 hardware options that user can chose from at time of purchasing: 1. Express Card port option 2. Expansion port option (Only one option can be selected) In general Express card reader is low cost and very useful port for supports: a. PCIE memory card (Sony SxS) b. 1394A/B c. Mini-PCIE SSD (that are not supported by SATA protocol) d. Sonnet Express-Card 4 SAS port adapter Express Port Option (Its need to be purchased at time of main s unit purchase) Dual Port 1394A/B Express Card adapter (works only with Express port option installed and enabled on the main unit or with the Expansion Box option) Mini-PCIE express card adapter (works only with Express port option enabled on the main unit or with Expansion Box and supports Mini-PCIE SSD drives that are not SATA protocols) Expansion Box with 2PCIE + 2PCI slots and with one Express Card Reader pre installed inside the Expansion Box. This option can be purchased only at time of the main unit s purchase and were Expansion Port is pre-installed and enabled (This is expensive solution and mostly needed if user need supports for SCSI drives)

6 Option: Expansion Port on the main unit Option: Expansion Box with Express Card Reader pre-installed SCSI Support Kit: For support 2 SCSI hard disk drives (Includes power to the hard disk drives), with the use of the Expansion Box

7 Soft Carrying Bag MediaClone, Inc Canby Ave, Unit 111 Reseda, CA Office: Fax: