Tableau TD3 Touch Screen Forensic Imager
There are forensic imaging tools and then there is the Tableau TD3 Forensic Imager. The TD3 is truly one of a kind. At its core TD3 is a high performance, reliable, and easy to use forensic duplicator - with a high resolution, touch screen User Interface (UI). Today, TD3 is capable of forensic data collection from SATA, IDE, USB 3.0/2.0/1.1, SAS, and FireWire (1394A/B) drives. No other forensic duplicator available today matches TD3 for its unique combination of performance, packaging, forensic capabilities, and usage models.
With TD3 software version 1.5.0, we've made the TD3 even more versatile by adding a fluid, web-based user interface. Now you can interact with your TD3 from a modern web browser on a computer, tablet, or even a smartphone. You can perform many of the features available from the touch screen UI, plus you can remotely browse and download files located on a storage device connected to the TD3. Read the TD3 1.5.0 User's Guide to learn more.
TD3 supports collecting data in a forensically sound (a.k.a. "write-blocked") manner. SATA, USB 3.0, USB 2.0/1.1, and FireWire devices connect directly to TD3 using the appropriate port. IDE and SAS devices can be imaged thru TDPX5 (IDE) and TDPX6 (SAS) expansion modules. The FireWire write blocker on TD3 allows for convenient imaging of Mac™ systems booted in "target disk mode" - without the hassle of hard drive removal.
TD3 offers a variety of evidence storage options. New for 2014 is the TDS2 SATA Drive Enclosure. TDS2 supports easy, "tool-less" hard drive insertion and removal. The locking handle on TDS2 enables easy hard drive replacement while also securing hard drives within the enclosure. No need for cable connections when using TDS2. The SATA power and signal connections are made directly between the TD3 and TDS2.
TDS2's are built to support simultaneous imaging to two SATA drives. Simply connect two TDS2's one on top of the other to enable "twinning mode".
Many examiners prefer to image directly to bare hard drives. TD3 supports imaging to bare hard drives or to other legacy Tableau Modular Storage Products with the appropriate cables (included in the TD3 kit).
New for 2014, TD3 users can add the flexibility and performance of writing out to USB 3.0 storage devices with the TDPX8-RW USB 3 Expansion Module. When connected to the TD3 expansion port, TDPX8-RW can be selected as an output destination in the TD3 setup parameters. Simply connect your USB 3.0 storage device and go!
For network based forensic acquisitions, remote triage applications, or network based "write blocking", TD3 comes with an integrated network connection. New for 2014 is the optional TDPXE Gigabit Ethernet expansion module. This module offers the flexibility of two additional network connections and improved networking performance.
Central to the uniqueness of TD3 is a high-resolution, color touch screen user interface, used to control and monitor ongoing TD3 operations. Designed to be powerful yet simple to use, this wizard driven UI uses simple touch gestures to select and initiate all TD3 functions. To facilitate easy data entry, TD3 includes a pop-up software touch-screen keypad for entering data, reviewing logs, connecting to networks, or completing setup. If a physical keypad is preferred, connect an external keyboard thru the TD3's general purpose USB 2.0 port. With the TD3, we've taken the art of duplicator design to a new level.
There are instances when central command may want or need to preview or collect data from a storage device located thousands of miles away. When used as a network-based write blocker, TD3 supports this. With the appropriate IP address, remote PCs can access TD3's via the Internet. Storage devices connected to TD3's write blocked ports are presented as an iSCSI target. In this manner, remote PCs can browse or even collect data from the remote storage device. In many instances, accessing data remotely is more convenient and possibly safer than physically transporting the storage devices.
TD3 provides the usage mode flexibility that is required by forensic professionals today. Check out the various ways that TD3 can be adapted to your forensic process by clicking on any of the tabs below:
