SuperImager™ 12" Forensic Imager & Platform

SuperImager™ Rugged- 12" SAS and USB 3.0 unit. Extremely Fast Forensic Imaging, that can performs Hash Verification @ 31.65GB/Min with SSD and @ 10GB/Min with 1TB WD Blue HDD, also can preforms Forensic Imaging with Hash on 1:2 with SSD @ 29GB/Min. It is a complete field platform unit to run Cellphone extraction, a full Forensic Analysis, and a quick Triage data extraction. The unit is very compact and easy to carry with a built-in 12" Touch Screen color LCD display, 4 cable-less native SAS/SATA HDD bay, 4 native USB 3.0 ports, e-SATA port, 1Gigabit Ethernet port, and two Audio Ports.
In one pass of read from the "Suspect" HDD, the SuperImager™ application can perform: Forensic Imaging with E01 compressed, Encryption with AES256, 3 parallel hash authentications (MD5, SHA1, SHA2), a simple binary keyword search, and save the Forensic Images to 2 Evidence HDD, to a local network and to a USB3.0 external TB RAID storage. As a platform, the Forensic Investigator can load and run third-party applications like Cellebrite/Oxygen/BlackBag/MPE+/Paraben for Cellphone and Tablet extraction and analysis, a Triage data analysis, or run a full Forensic analysis software like Encase, Nuix, and FTK. The unit is built with a very strong hardware that enable those said applications to run with excellent performance.

Features

• Case: Mobile, rugged, easy to carry.
• Display: 12 inch (1366x768) LED backlight color LCD display with Touchscreen.
• Speed: Externally fast; Complete SHA-1 verification at speed of 31GB/min run on SSD and 10GB/Min run on 1TB WD Blue SATA-3 Hard Disk Drive. Complete Forensic Imaging 1:2 with use of 3 SanDisk Extreme II 128GB SSD and with SHA-1 enabled at top speed of 29GB/min..
• GUI: The application is built with large icons and very easy to navigate. In a few clicks the operation is up and running.
• HDD Bay: Built-in 4 native SATA/SAS Hard Disk Drive drop-in Bay (No need for cables).
• Writes Block: Low level blocking mechanism of the device's drives and hardware protection.
• Hash: On-the-fly simultaneously Hash MD5/SHA-1/SHA-2.
• Encryption: On-the-fly AES256 encryption of the "Suspect" Hard Disk Drive. The encrypted data is saved on "Evidence" Hard Disk Drive in 100%, DD E01/Ex01 formats.
• Keyword search: On-the-fly binary keyword binary search on the “Suspect” Hard Disk Drive (Not a Unicode match).
• Saved Forensic Images in those Formats: 100% Bit by Bit, Linux DD Format, Encase E01/Ex01 formats included option for optimized compression (With very little speed degradation).
• Forensic Images Destination: Forensic Images can be saved to a local network shared folder for easy access and analysis, or to External USB3.0 RAID storage (Encrypted is optional).
• Network Capture: Data from network folders can be captured via iSCSi protocols.
• Captured Interfaces: SAS, SATA, e-SATA enclosures, IDE(with SATA to IDE adapters), USB 2.0, USB 3.0, 1394*, and SCSI* drives.
• Form Factors: Capture from various form factor devices: 3.5 inch, 2.5 inch, ZIF, 1.8Inch, Micro-SATA, Mini-SATA, PCIE*, Mini-PCIE*, M.2 NGFF.
• File Preview: Browse and preview captured data on the Internal Display by mounting the HDD under Windows and using Windows Explorer application or any other third-party viewing application.
• OS: Windows Embedded Standard 7 platform allows the running of other applications including cellphone acquisition software in parallel with a capture operation and other Forensic analyses applications, like Encase, Nuix, and FTK.
• Cross Ports Copy: The user can choose to capture data from one type of Storage interface port and save the Forensic Images to a different Storage interfaces. Cross copy data can be between SAS/SATA/IDE and USB interfaces.
• Capture Data from the Internal Hard Disk Drive a Computer: Captured via USB or Gigabit Ethernet ports of the laptop/computer, without the need to disassemble the laptop/computer.
• Parallel Forensic Imaging: Modes 1:1, 1:2, 1:3, 2:2, 2:3, 2:5 all in a simultaneous operation. The 2:2 need to run in 2 different sessions of 1:1. The 2:3 mode is with the use of e-SATA port. The 2:5 mode can be achieved with the use of e-SATA port and two USB 3.0 to SATA adapters. The 1:3 mode need to be configured at time of purchasing of the main unit, where Suspect 2 port is converted to Evidence 3 port.
• Parallel Forensic Imaging - Multi Session Operation: User can run a multiple efficient parallel operation as many ports are available.(No limitation on the number of running sessions) user can mix different type of operations, each operation can be as a new independent session. like erase a drive on one port, hash verify on second port, while imaging 1:1 on the left over 2 ports
• Erase Hard Disk Drives: Use DOD 5220-22M, Security Erase, or define your own pattern and numbers of iterations.
• Format Hard Disk Drives: A Quick Format Supports exFAT, NTFS.
• Hardware: A very high quality and high preforming component with military specifications. The unit was assembled and tested in the US.
• Hardware upgrade: If user needs more calculation power, like Nuix indexing, special when running a third-party analysis tools, the unit can be upgraded at time of purchasing for additional cost, to a CPU that is faster and have more cores, a large internal SSD, and 16GB of DDR3 memory.
• Platform: The unit has higher performance when running a third-party application: Cellphones and Tablets extraction and analyses data with the use of application like: Cellebrite/BlackBag/MPE+/Oxygen/Paraben/XRY, run a quick Triage data extraction and analysis, or run a full analysis software like EnCase, FTK, or Nuix.