SUPERIMAGER PLUS 8" T3 FORENSIC FIELD UNIT - LINUX FORENSIC IMAGER WITH I7 AND THUNDERBOLT PORT AND NVME
The SuperImager® Plus 8” T3 Forensic Field Unit - is a mobile, compact, easy to carry, versatile, and extremely fast Forensic Imaging unit that can serve as a complete Field Computer Forensic Investigation platform. The unit is running under Linux Ubuntu OS with a dual boot to Windows 8.1. The unit has a built-in extremely fast Thunderbolt 3.0 port (40 Gigabit/s), and it supplied with Thunderbolt 3.0 PCIe 3.0 Expansion Box and with 1394A/B and NVMe M.2 controllers that plugged inside the TB box and provided supports to those interfaces. The TB3.0 Expansion box also allows the user to plug any other storage controller (10Gigabit/s Ethernet, SCSI, add-on more SAS..) and capture data from almost any type of source.
The unit can be used to perform:
- Multiple parallel simultaneous Forensic Capture using bit by bit, DD, E01/Ex01(with full compression), Mix DD/E01 formats, copy the whole drive or one partition. Copy up to 5:10 for SATA drives with the use of USB3.0 to SATA adapters
- Run a Selective Imaging (Targeted Imaging) of files, folders, partitions with file extension filters
- Erase data from Evidence drive using DoD (ECE, E), Security Erase, Enhanced Security Erase, Sanitize erase protocols
- View the CAPTURED data directly on an Ubuntu Desktop screen or the Windows screen
- Encrypt the data while capturing (AES256)
- HASH the data while capturing (run all the 3 HASH engines at the same session SHA-1, SHA-2, MD5)
- Run Cellphone/Tablets data Extraction and Analysis(Windows side)
- Prepare Forensic Triage keys and view the captured targeted data
- Run a Keyword Search on the Suspect drive, before the capture, or while the capture
- Run a full Forensic Analysis application like Encase/Nuix/FTK(Windows side)
- Run a Virtual Drive Emulator (This option is enabled on this unit)
- Use the Remote Capture application to capture data from unopened Laptops with Intel-based CPU, Tablets and PC (Supplied with this unit)
- Use the Thunderbolt port to capture data from USB3.1 Gen2 storage devices, Mac via Thunderbolt 2/3 port or 1394 port
- Use the unit as "Writes Blocker Bridge" over the network, remotely access any storage attached to the unit in a write-blocked environment, and run a third-party application such as Forensic Explorer, Encase via the network (that is a good feature when you have a 10Giga/s network (use this link to get one the unit's configuration we provided with 10Giga/s)
The unit built-in: 8” Touchscreen color LCD display, 4 native SAS/SATA ports, 8 native USB3.1 ports, e-SATA port, 2 Generic USB2.0 ports, 1Gigabit/s Ethernet ports, Display port, Thunderbolt 3.0 port, and audio ports. The unit is supplied with a slim and compact Thunderbolt PCIe 3.0 Expansion Box where the user can plug many different kinds of storage devices and capture data from (SCSI, 1394, NVMe, FC, and more). The Expansion Box also has USB 3.1 port that supports capture of USB 3.1 storage devices. The solution also includes NVMe M.2 controller and 1394A/B controller that plugged inside the Thunderbolt Expansion Box. The user can swap controllers very easily as needed.