Home > Line of Products ↓ >

SuperImager Plus Desktop Forensic Lab Unit - Linux Forensic Imaging unit with dual boot to Windows

SuperImager Plus Desktop Forensic Imager Lab Unit - with 8" Touchscreen color LCD display and 8SAS/SATA-3 and 6 USB3.0
SuperImager Plus Desktop Forensic Lab Unit - Multiple sources to Multiple targets heavy duty Forensic Imaging device


 
Alternative Views:


SuperImager Plus Desktop Forensic Lab unit with 8 SAS/SATA-3 and 6 USB3.0 ports. The unit is a top performing of multiple sources to multiple targets of computer forensic Imaging in the market

Product Code: SIL-0001-00C
Please call for pricing

Description Technical Specs Extended Information
 
The SuperImager® Plus Desktop Forensic Lab Unit - is heavy duty, industrial, multiple sources/ multiple targets, and extremely fast Digital Forensics Imaging unit. The unit is running under Linux Ubuntu OS which is less targeted OS by malware, and it reduces the OS performance overhead, especially when it perform compression, by almost 20%. User can use to the unit to perform: Forensic Imaging with full E01 compression (4:4 native SAS/SATA), Forensic Imaging from 7 Suspects to one large Evidence, Upload 8 Forensic images to network, Erase data includes DoD/ Security Erase/Enhanced Security Erase, View the data directly on Ubuntu Desktop, Encrypt data, Cellphone/Tablets data Extraction and Analysis, and Full Forensic Analysis like Encase/Nuix/FTK. The Unit can be expanded with optional expansion port or express port to support SCSI and 1394 storage devices.The unit is designed to help expedite the forensic imaging process, especial in facilities where there is a large backlog in imaging hard disk drives.
The SuperImager Plus Desktop Forensic Lab unit has built-in 8” Touchscreen color LCD display, 8 native SAS/SATA ports in a 8 open tray drive caddy, 6 native USB3.0 ports, e-SATA port, Generic USB2.0 port, 1Gigabit Ethernet port
The SuperImager® Plus Desktop Forensic Lab Unit as Forensic Imaging Tool: In one read pass from the "Suspect" Hard Disk Drive, the SuperImager® Plus application can run the following operations simultaneously: Forensic Imaging with E01 format and with full compression, Encryption with AES256, simultaneously calculate 3 Hash Verification and Authentication values (MD5, SHA1, SHA2), a Binary Keyword Search, and Saving the captured Forensic Images to 2 “Evidence” hard disk drives, local network, and to external compact USB3.0/e-SATA TB RAID encrypted storage. The basic Forensic Imaging mode can be 4:4 for SAS/SATA and 3:3 for USB3.0 storage devices. (7:7 with the use of USB3.0 to SATA adapters, supports SATA drives only)
Special Mode- Upload from many to one: Capture from Multiple Suspect drives into one large Evidence drive
The Unit as Complete Forensic Platform:
In addition the unit can serve as a platform for a Forensic investigator to run a complete investigation and to perform: Cellphones and Tablets data Extraction and Analysis A complete Computer Forensic investigation Analysis with applications such as: Nuix, FTK, EnCase, ProDiscovery
The Unit as Data Eraser:
Supports DoD and Security Erase, Enhanced Security erase protocols that are NIST 800-88 compliance.
The SuperImager Plus Desktop Forensic Lab unit is one of the top-of-the-line forensic imaging device on the market today. It will outperform many units running Windows Imaging applications with i7 CPU The unit comes in 3 Optional configurations:
1) Basic model

2) Express Port enabled model - Where user can plug optional Express Card adapters like 1394, PCIE memory cards, Mini PCIE SSD, 1394 to Thunderbolt adapter for Mac data acquistion

3) Expansion Port enabled model - Where user can plug optional Expansion Box and connect SCSI hard disk drives

Dual Boot (Linux /Windows Pro 7): Linux OS for forensic Imaging purpose for a faster, more efficient and a more secure operations. Windows OS for Forensic Analyzing Applications, Cellphone Data Extractions,Triage data collections
Network Multiple Forensic Images Loader - Unique feature that solves 1 Gigabit/s Port Upload Bottleneck. The user can upload up to 8 forensic images directly to a network using 8 equivalent 1Gigabit/s network streams
SuperImager Plus unit with i7 CPU, 16GB Memory, and S/W Version 1.4.52
Hash Verification/ Authentication Only (Reading Speed) Avg Speed GB/Min
Hash single drive, in a single session (Samsung 850 EVO SSD)
SHA-1 30.6
MD5 30.6
SHA-1+ MD5 30.6
Hash 2 drives in 2 separate sessions (2 Samsung 850 EVO SSD)
SHA-1 + MD5 drive 1 26.2
SHA-1 + MD5 drive 2 26.6
Hash single drive, in a single session (SanDisk Extreme II 128GB)
SHA-1 30.8
SHA-1 + MD5 30.8
Wipe Drives (Write Speed) (Samsung 850EVO SSD)
Security Erase Mode 577.2
Single Pass - User Erase Mode 28.8
Forensic Imaging
100% bit by bit Imaging Samsung 850 EVO SSD to Samsung 850 EVO SSD
with SHA-1+ MD5 Hash on 28.5
DD Imaging Samsung 850 EVO SSD to Samsung 850 EVO SSD (2GB Files Chunks and NTFS)
with SHA-1 + MD5 Hash on 29.1
DD Imaging SanDisk Extreme II SSD to Samsung 850 EVO SSD 2 GB file Chunks and NTFS)
with SHA-1 + MD5 hash on 28.5
E01 Imaging Samsung 850 EVO SSD to Samsung 850 EVO SSD (2GB Files Chunks and NTFS)
with SHA-1 + MD5 Hash on 24.2
Features
    • Main Hardware Features:
    • Case: Industrial, heavy duty, desktop style
    • CPU: i7
    • Display: 8" (800x600) LED backlight Touchscreen color LCD display
    • Hardware: Very high quality high performing components, some with military specifications.
    • Hardware upgrade: The unit can be upgraded at time of purchasing for additional cost, to a large internal SSD
    • OS: Linux Ubuntu 64 Bit
    • Writes Block: Using “device driver” blocking mechanism based on Maxim Suhanov Mechanism (https://github.com/msuhanov/Linux-write-blocker)
    • Application Updates: Application can be easily updated via USB flash drive and special update screen
    • Application Settings:
    • HPA/DCO Automatic Supports: The application has the ability to automatically open HPA and DCO areas, and resize the "Suspect" hard drive to its full native capacity, in order to capture any “hidden data” (HPA/DCO are special areas on the hard disk drive that support this feature)
    • Bad Sectors Handling: User can select to skip bad sectors/blocks, or abort the operation when it encounters bad sectors/block of sectors on the "Suspect" hard disk drive
    • Ports:
    • Forensic Images Destination: User can save Forensic Images to a local network shared folder for easy access and analysis, or save images to external USB3.0 RAID (encryption is optional) storage in a very good speed
    • Captured Storage Protocols and Interfaces: SAS, SATA, e-SATA enclosures, IDE, USB2.0, USB3.0, MMC, M.2 NGFF(SATA or PCIE base), 1394*, Thunderbolt*, and SCSI*
    • Form Factors: Capture data from various form factor devices: 3.5", 2.5", ZIF, 1.8", Micro-SATA, Mini-SATA, PCIE*, Mini PCIE*, M.2 NGFF
    • Cross Copy from Ports and Interfaces: The user can choose to capture from one type of port, storage protocol and interface, and save the forensic Images into a different port, storage protocol and interface. The cross copy of data can be done between SAS/SATA/IDE/USB/SCSI/1394 interfaces
    • Application Features:
    • GUI: The application is built with large icons and is very simple and easy-to-navigate. In a few clicks user can set the operation, and it will be quickly up and running
    • Speed: Extremely fast
    • • Tested with Hash verification operation with SHA-1 enabled the recorded top speed was 30GB/min with Solid State Drive, and 10GB/min with 1TB WD Blue SATA-3 Hard Disk Drive
    • • Tested with Forensic Imaging operation of 1 to 2 with SHA-1 enabled the recorded sustained top speed was 29GB/min with 3 SSD of SanDisk 120GB Extreme II
    • Extreme Speeds when performing Forensic capture with E01/Ex01 formats and with full Compression:
    • • The new Linux-based SuperImager Plus application utilizes and optimizes multiple CPU cores to achieve one of the most efficient operations, while performing at incredibly high speeds with E01/Ex01 compression. The application allows users to manually select and adjust the number of threads and the level of compression used during each session
    • • Forensic data capture with Encase E01/Ex01 formats with full compression is widely used operation in the forensic industry, and generally requires a trade-off between speed, space, and the time that it takes to decompressed the image by the EnCase application
    • • Comparative tests show a 20% increase in speed when using the SuperImager Plus Linux-based application over the SuperImager Windows-based application. Tests were performed with the same hardware and the same hard disk drives (filled with 43% of random data), and the same level 1 of compression. The Linux-based application was set to use 16 compression threads
    • Hash Authentication: Simultaneously calculates on-the-fly up to 3 Hash Authentication values MD5/SHA-1/SHA-2
    • Encryption: On-the-fly AES256 encryption of the "Suspect" Hard Disk Drive, saving the encrypted data on "Evidence" Hard Disk Drive in 100%, DD, E01/Ex01 formats
    • Decryption: The user can perform decryption on a drive, previously encrypted by any of the SuperImager units. Alternatively user can use a standalone MediaClone Linux decryption utility application to perform decryption of that drive using any PC. The supplied standalone decryption utility application can be burned onto a USB flash drive that later can be used to boot the PC to the Linux utility, where the encrypted drive and a blank destination drive were attached to the PC. (The user needs to supply to the utility application the saved encryption key)
    • Forensic Images can be saved in those Formats: Mirror Image Bit by Bit(100% or any % of the drive), Linux DD Format, Encase E01/Ex01 formats include options for optimized compression
    • Evidence Drive Formats: exFAT/FAT/NTFS/HFS+/EXT4
    • Log Files: Audit trail in PDF formats, or txt formats with ability to customize the reports and adding company Logo
    • Drive Spanning: Supports spanning the captured data onto many “Evidence” drives , when the Evidence drives are not large enough (Also supports restore from spanned multiple drives)
    • Main application Features:
    • • Forensic Imaging Mode
    • • Forensic Restore back data to original
    • • Erase data from drives and Quick Format
    • • Hash calculation authentication and verification
    • • Virtual Drive Emulator (Optional)
    • Main Forensic Imaging Mode Features:
    • • Forensic Imaging Mode 100%, DD, E01/Ex01 – with optional compression
    • • Hash while capture: MD5, SHA-1, SHA-2 (all 3 can be selected simultaneously)
    • • Erase Reminder of the drive
    • • Encryption/Decryption
    • Parallel operations:
    • Parallel Forensic Imaging - Multiple Session Operations: User can run a multiple efficient parallel operation, since many ports are available. User can mix different type of operations, and each operation is set as a new independent session. Example of operations: erase data from a hard disk drive on one port, hash verify on second port, while forensic imaging 1 to 1 on the remaining ports
    • Basic Parallel Forensic Imaging: The supported modes are:
    • Native SAS/SATA: 4:4
    • USB3.0: 3:3
    • More Ports for Forensic Imaging:
    • With the use of USB3.0 to SATA fast adapters, the unit can support up to 7:7 Forensic Imaging of SATA Hard Disk Drives. With the use of Express Port Option enabled, and the Optional Sonnet 4 SAS Ports Express Card Adapter, the application can support up to 6 to 6 Forensic Imaging of SAS Hard Disk Drives

    • Parallel operation – Linux Elaborated:
    • Hard Drive Detection Application Screen: All hard disk drives and storage devices that are connected to the units will be scanned and displayed in one application screen called “the detection screen”. User can tap on each drive to get its detailed info, as well as selecting it for the desired operation they are planning to use
    • Parallel Forensic Imaging: It depends on the number and the kind of ports that each model has. The application is very flexible in running multiple source/Suspect drives to multiple destination/Evidence drives, all in a simultaneous operations. The user has the flexibility to change a role of a port from Evidence to Suspect, and her is not limited by the pre-assigned "Suspect" ports. The session control application screen provides the user with a very comprehensive information and control over the running sessions, including all the setting of the session, and ability to abort the session
    • Parallel Forensic Imaging - Multiple Session Operations: User can run multiple efficient parallel operations and can mix different type of operations; for example erase hard disk drive on one port, hash verification on another port, while performing forensic imaging on other ports (each operation can function as a
    • new independent session). The number of sessions also depends on the CPU: i5 -4 sessions, i7- 8 sessions
    • Batch Mode Forensic Imaging - Multiple Suspect into one Evidence: User can run in one session a forensic capture from many Suspect drives and save the images (E01/DD) into one large Evidence drive in append mode.
    • Network:
    • Network Capture: Data from network folder can be captured and saved into “Evidence” drives via iSCSI storage protocols.(SMB, NFS, CIFS)
    • Upload Forensic Images to Network: Upload many Forensic images to the local network (DD, E01) simultaneously by using up to 8 parallel equivalent of 1 Gigabit/s network streams
    • Remote Capture - Capture Data from the Internal Hard Disk Drives of a Computer: Using USB or 1 Gigabit Ethernet ports of the laptop/computer, enables capture without the needs to remove the hard drive from the Laptop/computer. The imaging speed is restricted to performance of the Laptop/PC CPU and the 1 Gigabit/s connection (Also if the USB3.0 to 1 Gigabit/s adapter will been used, it will restrict this performance as well)
    • Erase and Quick Format Operation:
    • Hard Disk Drive Erase Protocols: DoD 5220-22M, Security Erase, Enhanced Security Erase, or user can define the final data filling pattern and the number of iterations (Security Erase, Enhanced Security Erase, and DoD erase protocols are NIST 800-88 compliance)
    • Quick Format: NTFS, FAT, HFS+, EXT4, and exFAT
    • Logs and Erase Certification: The application generates extensive erase log files and erase certification (option to save to NIST 800-88 certification format) that are easy to export to USB flash drive
    • Unit as a Platform:
    • File Preview: Browse and preview captured data on the Internal Display
    • High Performances: As a platform, a forensic investigator can, in addition to imaging and capturing data, load and run third-party applications to analyze the captured data:
    • • Cellphone/Tablet data extraction and analysis: Cellebrite, Oxygen, BlackBag, MPE+, Paraben applications
    • • Triage data collection: Nuix/Encase portable applications
    • • Full computer forensic analysis: Encase, Nuix, and FTK applications
      The units have very firm hardware that enables those said applications to run with excellent performance
    • Expansion capabilities and the main hardware options:
    • Express Card Port Option: Optional port that needs to be pre-installed at time of purchasing in the main unit: This option gives the user the ability to plug and use a few kinds of express cards adapters to support capture and erase data from additional interfaces and devices. This option is very useful and saves in most of the cases the need for expensive and bulky Expansion Box. The Express Card adapters can be dual port 1394A/B, PCIE memory cards (Sony SxS), Mini-PCIE that are not supported by SATA protocols (are used in some MacBook Air, with M.2 (NGFF) form factor)
    • Expansion Port and Expansion Box Option: Optional expansion ports that enable user to plug in an Expansion Box in order to add-on many other devices: User can configure the main unit with only one connectivity port or Express Card Port or Expansion Port. The Expansion Port is mostly required when user needs to erase data from SCSI Hard Disk Drives. In addition to purchasing the Expansion Box, user can also purchase the SCSI 2 drives Kit which supports capture or erase from 2 SCSI Hard Disk drives. The SCSI 2 drives Kit includes all the cables, terminators and adapters that are needed to operate 2 SCSI hard disk drives. (The SCSI controller is installed inside the Expansion Box). The Expansion Box is also supplied with a low profile Express Card reader pre-installed inside the Expansion Box
    • USB3.0 to SATA adapters and Kits Option: Today USB3.0 technology is extremely fast and can run read data from SSD drives up to 20GB/min.
    • With the use of USB3.0 to SATA 4 channel Kit, user can convert 4 USB3.0 ports to 4 SATA ports on any of MediaClone units. The optional Kit is supplied with one external PS, and it includes all the cabling to power and connected
    • the 4 USB3.0 to SATA adapters.The tested performance when running 4 adapters in parallel was measured at a very high speed, with a very little speed degradation
    • SCSI KIT Option: The SCSI Kit includes the low profile SCSI 1 ports PCIE –x1 controller, 2 channel SCSI LVDS cable (68pin connectors), SCSI terminator, and VHDCI to SCSI 2 adapter
    • 1394 Option: This option is supplied with 1394A/B Express Card. It is a very easy and quick way to add support for 1394 devices that can be daisy chained. This option works on units that support and installed with Expansion Port or Express Port options
    • Thunderbolt Option:With the use of 1394 to express adapter and Thunderbolt to 1394 adapter, a user can connect the unit into a Mac that have a TB port (that is booted in target mode) and access the Mac internal drive
    • NVMe Option KIT: With the use of NVME PCIEx4 controller and the Expasnion Box, th euser can capture data from NVMe SSD(M.2, 2.5")
    • USB3.0/SATA to M.2 (NGFF) adapters Option: Currently, most laptops and tablets use M.2 (NGFF) Storage devices. This adapter supports connectivity to some of the newest SSD M.2 storage (Storage that is supported by SATA Protocols). There are 2 types of adapters one with USB3.0 and the other with SATA
    • USB3.0 to M.2 (NGFF) PCIE(Not NVMe) base adapters Option: Few adapters are available that supports PCIE base SSD that are been used in MackBook Air 2012+, MacBook Pro Retina 2012+ , MacBook 2013-14
    • Built in USA: The units are built and tested in the US
    • Warranty: One year warranty for the main unit. (It is not include cables and accessories)
    • * Expansion ready unit

Accessories
Mini SATA(mSATA) to SATA Adapter External Encypted Mobile TB RAID Storage M.2 NGFF to USB3.0 adapter supporting PCIE base SSD (B+M) not NVME IDE to SATA Adapters
Our Price: $200.00
Mini SATA(mSATA) to SATA Adapter M.2 NGFF to USB3.0 adapter supports PCIE SSD IDE to SATA Adapters
SATA Split Power Cable USB3.0 to e-SATA Adapter at Speed of 3GBs Mac SSD 7+17 pins to SATA adapter for MacBook Pro 2012 Hard Case and custom foam for the 8" Field Unit
SATA Split Power Cable USB3.0 to e-SATA adapter at speed of 3Gbs. SuperImager 8" Field unit hard case and foam option
Express Card Port Option for the main units USB3.0 to SATA Adapters - 4 Channel Kit include power - Linux ZIF Adapter to SATA Adapter, with a Flex Cable SCSI Kit support up to 2 SCSI Hard Disk Drive
Express card port USB3.0 to SATA 4-Channel kit- Linux ZIF Adapter to SATA Adapter Data Acquisition or Cloning of SCSI hard drives
1.8" IDE to SATA Adapter M.2 (NGFF) SSD to SATA III B (SATA base only) Micro SATA to SATA Adapter Laptop Remote Access & Data Capture Kit for SuperImager units
1.8 Inch IDE to SATA adapter Micro SATA to SATA Adapter Laptop remote capture kit with the use of SuperImager units
1394 To Thunderbolt adapter ErgoTouch USB TouchPad USB3.0 MMC Card reader Express Card Mini- PCIE Adapter
Our Price: $90.00
1394 to thunderbolt ErgoTouch USB TouchPad USB3.0 MMC reader Express Port Mini PCIE adapter for SuperImager units
1394A/B Dual Port Express card adapter Option 2.5 Inch IDE to SATA Adapter SATA Split Data Cable Expansion Box Option
1394A/B Express card adapter 2.5 Inch IDE to SATA Adapter SATA Split Data Cable PCIE Expansion Box

Share your knowledge of this product. Be the first to write a review »