SuperImager Plus 7" Mini Unit with i7 Mobile CPU, Field Forensic Imaging, Cellphone data Extraction (Optional Dual Boot)
The SuperImager Plus 7" Mini with i7 4th generation Forensic field unit is very compact, lightweight, and easy to carry, and it is the perfect tool to perform Forensic Imaging out in the field. It built with 7" Touchscreen color high-resolution LCD display, 3 SATA ports (with secure and keyed SATA power connector), 3 USB3.0 ports, 1 Gigabit/s Ethernet port, and a HDMI port. It is affordable and capable of performing extremely fast Forensic Imaging (Run a 100% bit by bit imaging at 21GB/min on SSD) and fast Hash Authentication (Run SHA-1 at 26GB/min on SSD and 8GB/min on 1TB WD Blue Drive).
The SuperImager Plus application has the capabilities to perform in one read pass from the "Suspect" drive:
1) Forensic Imaging with E01/Ex01 format and full compression
2) Encryption with AES256
3) Parallel HASH authentication (Run all the 3 HASH engines MD5, SHA1, SHA2 in the same session),
It is also capable of saving Forensic Images to three destinations in the same time:
1) 2 external SATA Evidence Drives
2) External compact USB3.0/eSATA RAID encrypted storage device
3) Network.
4) Also, with the use of the USB3.0 to SATA optional KIT, the user can convert the unit's 3 USB3.0 ports to 3 SATA ports, and have a total of 6 SATA ports available to be used. Using the 6 ports, the user can perform Forensic Imaging from 3 "Suspect" drives to 3 "Evidence" drives in 3 separate sessions
5) Ability to run a Quick Keyword Search on the Suspect drive, prior to capture or during the capture (with filters on the file extension)
The Forensic investigator can load and run third-party applications such as Cellebrite, Oxygen, DART, Paraben, BlackBag. The user can also run third-party Triage applications under Windows on the attached Suspect or Evidence drives. The MediaClone Windows Drive Power Utility application allows the user to mount safely drives as read-only or read-write (depends on the unit’s port) in a secured way. The application also allows the user to dismount and remove drives in a safe way. Suspect’s port is automatically assigned to be read only.
Included Items:
- One SATA to 40-pin IDE solution
- One 2.5" IDE 44-pin adapter
- Three SATA data and power combo cables
| Secure DC-in Connector |
Keyed and Locked DC-In connector to avoid accidental disconnect in the middle of an operation |
| Speed |
Externally fast, even with SHA-1- can run 30GB/min with Sold State Drive(SSD) and 10GB/min with 1TB WD Blue SATA-3 Hard Disk Drive |
| GUI |
The application is built with large and simple icons and is easy to navigate |
| Write Blocks |
Low-level blocking mechanism for the device's drives and hardware |
| Hash |
Simultaneously Hash MD5/SHA-1/SHA-2 |
| Encryption |
On-the-fly AES256 encryption of the "Suspect" Hard Disk Drive, and the encrypted data is saved on "Evidence" Hard Disk Driven 100%, DD E01/Ex01 formats |
| Keyword Search |
A rapid binary keyword binary search on the “Suspect” Hard Disk Drive (Not a Unicode match) |
| Forensic Images can be Saved in these Formats |
100% Bit by Bit, Linux DD Format, Encase E01/Ex01 formats include an option for optimized compression (With very little speed degradation) |
| Network Capture |
Data from the network folder can be captured via iSCSI protocols |
| Captured Interfaces |
SATA, e-SATA enclosures, IDE, USB 2.0, USB 3.0 |
| File Preview |
Browse and preview captured data on the Internal Display by mounting the Hard Disk Drive under Windows and then using the Windows Explorer application or any other third-party viewing applications |
| OS |
Windows Embedded Standard 7 platform allows the running of other applications including cell phone acquisition software in parallel with a capture operation and other Forensic analyses applications like Encase, Nuix, and FTK |
| Cross Ports Copy |
User can choose to capture from one type of Storage interface port and save the Forensic Images into a different kind of Storage interfaces. Cross copy data can be between SAS/SATA/IDE and USB interfaces |
| Capture Data |
From the Internal Hard Disk Drive of a Computer - Data is captured via USB or Gigabit Ethernet ports of the laptop/computer, without the need to disassemble the laptop/computer unit |
| Parallel Forensic Imaging |
Modes 1:1, 1:2, simultaneously |
| Hardware |
A very high performing component with military specifications. The unit is assembled and tested in the US |
| Platform |
The unit has high performance when running a third-party application: Cellphone and Tablets acquisition like Cellebrite/BlackBag/MPE+/Oxygen/Paraben. Run a Triage application like Nuix/Encase |
