SuperImager™ Rugged 12" Touch Screen - Forensic Imager & Field Platform
SuperImager™ Rugged - 12" color LCD display and Touchscreen unit is an extremely fast Forensic Imaging unit (Complete Hash verification operation with SHA-1 enabled on SSD @ 31GB/min, on WD 1TB Blue @10GB/min, Complete Forensic Imaging 1:2 with SHA-1 enabled on 3 SanDisk Extreme II 128GB SSD @ 29Gb/Min) and a great field platform unit. This unit is easy to carry with a compact rugged case and has a built-in 4 native SAS/SATA HDD bay without the needs for SAS, 4 native USB3.0 ports, one e-SATA port, one 1Gigabit Ethernet port, and 2 Audio ports.
In one read pass from the "Suspect" HDD, the SuperImager™ application can run the following operations simultaneously: Forensic Imaging with E01 compressed (3% degradation), Encryption AES256, 3 parallel Hash verification and authentication (MD5, SHA1, SHA2), a quick simple binary keyword search, and save the Forensic Images to 2 Evidence HDD, to a local the network, and to external USB3.0 RAID storage. The unit can serve as a platform and tool in the field for a Forensic investigator to extract data from Cellphones and Tablets, run a quick Triage data analysis, and run a full Forensic analysis application.
This unit is the best seller and top of the line of forensic imaging devices on the market today.
- One SATA to 40-pin IDE adapter
- One 2.5" IDE 44-pin adapter
- One Micro SATA adapter
- One Mini SATA adapter
- One USB Keyboard and Touch Pad
- Four 29pin SAS/SATA data and power combo extension cables
Display: 12 inch (1366x768) LED backlight color LCD display with Touchscreen.
Speed: Externally fast; Complete SHA-1 verification at speed of 31GB/min run on SSD and 10GB/Min run on 1TB WD Blue SATA-3 Hard Disk Drive. Complete Forensic Imaging 1:2 with use of 3 SanDisk Extreme II 128GB SSD and with SHA-1 enabled at a top speed of 29GB/min.
GUI: The application is built with large icons and very easy to navigate. In a few clicks, the operation is up and running.
HDD Bay: Built-in 4 native SATA/SAS Hard Disk Drive drop-in Bay (No need for cables).
Write Block: Low-level blocking mechanism of the device's drives and hardware protection.
Hash: On-the-fly simultaneously Hash MD5/SHA-1/SHA-2.
Encryption: On-the-fly AES256 encryption of the "Suspect" Hard Disk Drive. The encrypted data is saved on "Evidence" Hard Disk Drive in 100%, DD E01/Ex01 formats.
Keyword search: On-the-fly binary keyword binary search on the “Suspect” Hard Disk Drive (Not a Unicode match).
Saved Forensic Images in those Formats: 100% Bit by Bit, Linux DD Format, Encase E01/Ex01 formats included an option for optimized compression (With very little speed degradation).
Forensic Images Destination: Forensic Images can be saved to a local network shared folder for easy access and analysis, or to External USB3.0 RAID storage (Encrypted is optional).
Network Capture: Data from network folders can be captured via iSCSi protocols.
Captured Interfaces: SAS, SATA, e-SATA enclosures, IDE(with SATA to IDE adapters), USB 2.0, USB 3.0, 1394*, and SCSI* drives.
Form Factors: Capture from various form factor devices: 3.5 inch, 2.5 inch, ZIF, 1.8Inch, Micro-SATA, Mini-SATA, PCIE*, Mini-PCIE*, M.2 NGFF.
File Preview: Browse and preview captured data on the Internal Display by mounting the HDD under Windows and using Windows Explorer application or any other third-party viewing application.
OS: Windows Embedded Standard 7 platform allows the running of other applications including cellphone acquisition software in parallel with a capture operation and other Forensic analyses applications, like Encase, Nuix, and FTK.
Cross Ports Copy: The user can choose to capture data from one type of Storage interface port and save the Forensic Images to different Storage interfaces. Cross copy data can be between SAS/SATA/IDE and USB interfaces.
Capture Data from the Internal Hard Disk Drive a Computer: Captured via USB or Gigabit Ethernet ports of the laptop/computer, without the need to disassemble the laptop/computer.
Parallel Forensic Imaging: Modes 1:1, 1:2, 1:3, 2:2, 2:3, 2:5 all in a simultaneous operation. The 2:2 need to run in 2 different sessions of 1:1. The 2:3 mode is with the use of e-SATA port. The 2:5 mode can be achieved with the use of e-SATA port and two USB 3.0 to SATA adapters. The 1:3 mode needs to be configured at the time of purchasing of the main unit, where Suspect 2 port is converted to Evidence 3 port.
Parallel Forensic Imaging - Multi-Session Operation: Users can run multiple efficient parallel operations as many ports are available. (No limitation on the number of running sessions) user can mix different type of operations, each operation can be as a new independent session. like erase a drive on one port, hash verify on the second port, while imaging 1:1 on the leftover 2 ports
Erase Hard Disk Drives: Use DOD 5220-22M, Security Erase, or define your own pattern and numbers of iterations.
Format Hard Disk Drives: A Quick Format Supports exFAT, NTFS.
Hardware: A very high quality and high performing component with military specifications. The unit was assembled and tested in the US.
Hardware upgrade: If the user needs more calculation power, like Nuix indexing, special when running third-party analysis tools, the unit can be upgraded at the time of purchasing for an additional cost, to a CPU that is faster and has more cores, a larger internal SSD, and 16GB of DDR3 memory.
Platform: The unit has higher performance when running a third-party application: Cellphones and Tablets extraction and analyses data with the use of an application such as Cellebrite/BlackBag/MPE+/Oxygen/Paraben/XRY, run a quick Triage data extraction and analysis or run a full analysis software like EnCase, FTK, or Nuix.