Home > Line of Products ↓ >

SuperImager Plus 8” Portable 3 NVMe +3 SATA+ 4 SAS Forensic Imaging Unit with Thunderbolt - Dual Open OSboot

SuperImager Plus 8"  NVMe + SATA mix  Forensic Field Unit - 8" Touchscreen color LCD display and 7 SATA/SAS ports, 3 NVMe ports, 1 Thunderbolt 3.0 port
SuperImager Plus 8" NVMe + SATA/SAS – A Portable Forensic Imaging Unit with Thunderbolt 3.0 port and expansion box.


 
Alternative Views:


Extreme Forensic Imaging Portable unit with NVMe, SATA, and Thunderbolt 3.0 mix ports, running Dual Boot of Linux OS for Forensic data imaging and virtual emulator, and Windows 10 for full forensic analysis, cellphone data extraction/analysis, and triage data collection. The unit is portable, compact, easy to carry, and extremely fast. It is built with 2 NVMe U.2 ports, 2 ports of SATA3, 7 ports of USB 3.2, one Thunderbolt 3.0 port, and is supplied with a Thunderbolt Expansion box with 4 SAS ports controller + one M.2 NVMe controller to serve as the third NVMe port. The user can run multiple, parallel, simultaneous forensic imaging operations from many storage devices, with 4 HASH values and with encryption on the fly. In addition, the unit includes a Remote Capture KIT and an Enabled Virtual Emulator option. The top speed achieved is 31GB/min SATA SSD, 187GB/min NVMe.


Product Code: SIF-0037-00A
Qty:

Description Technical Specs Extended Information
 
The SuperImager® Plus 8” 3 NVMe +3 SATA+4 SAS Portable Forensic Unit

SuperImager Plus 8” Portable Forensic Field unit with 3 NVMe + 4 SAS/SATA + 3 SATA+ TB3.0+7 USB 3.2 ports. It is one of the top performance Field Computer Forensic Imaging tools and a Complete Digital Forensic Investigation platform

The unit is Portable, Compact, easy to carry, and extremely fast. It is built with 2 NVMe U.2 data & power ports, 2 SATA3 data & power ports, e-SATA port, 8 USB3.0/3.1 ports, and a Thunderbolt 3.0 port.

The unit is configured with Dual Open OS of Linux for fast, efficient Forensic imaging and Windows 10 for running full Forensic Analysis (EnCase, Nuix, Axiom, and others), cellphone data extraction(Cellebrite, MASB, and others), and triage data collection. Using the Linux OS, the user can run: multiple, parallel simultaneous independent forensic imaging sessions (mirror image, image a single partition, Linux-DD, EnCase, mix E01/DD, VHD, Triage with Files and Folders) with 4 HASH values(MD5, SHA1, SHA2, and SHA512 run all the four at the same time), encryption, compression, keyword search all on the fly and save images to a network.

The max speed achieved: 31GB/min SATA SSD, 187GB/min NVMe SSD.

The unit hardware is robust, running i7 12 generation CPU with 32GB of memory, 1TB SSD, and 8” LCD display.

Main ports:

• 3 SATA ports: 2 SATA ports (power & data) and one e-SATA port on the main unit

• 4 SAS/SATA ports: On the TB Expansion Box

• 3 NVMe ports: 2 U.2 NVMe on the main unit (power & data) and one U.2 & M.2 NVMe on the TB Expansion Box

• TB3.0 port

The unit supplied with:

• Remote Capture KIT

• Virtual Emulator (viewing the Suspect drive before the capture).

• 2 U.2 Extension Cables.

• 2 U.2 to M.2 NVMe adapters.

• Thunderbolt 3.0 to PCI-E Expansion Box with 4 SAS ports controller and with U.2 and M.2 NVMe controller.

The Thunderbolt Expansion box brings a lot of additional connectivity.

Thunderbolt 3.0 to 10GbE adapter and the Mac/Thunderbolt acquisition kit are important options.

To compare this unit to other MediaClone Portable units that support NVMe: SuperImager Plus 8” T3 unit has one NVMe port, and the SuperImager Plus 8” with mix 5 NVMe + 5 SAS/SATA has 5 NVMe ports.

Here are some of the tasks that the user can do:

1) Multiple Parallel Forensic Capture: Mirror (bit by bit), Linux-DD format, E01/Ex01 format (with full compression), Mixed-Format DD/E01, Single partition, copy the whole drive or only parts. Copy 1:6/2:4/3:3 for SATA drives, 1:1, 1:2 for NVMe SSD, 2:2 for SAS drives, or any mix between the 3 NVMe ports to 7 SATA/SAS ports or 8 USB3.0/3.1 ports.

2) Run a Selective Imaging (Targeted Imaging) of files, folders, and partitions with file extension filters and save HASH and metadata of the files.

3) Erase data from the Evidence drive before use - using DoD (ECE, E), Security Erase, NVMe Secure Erase, Sanitize, or User-Erase protocols.

4) View the Suspect drive directly on the Ubuntu Desktop screen using the virtual drive emulator.

5) Encrypt the data while capturing (using the AES256 engine) and decryption at the destination using MediaClone utility

6) HASH the data while capturing – run all the four MD5, SHA-1, SHA-2, and SHA-512 HASH engines, simultaneously.

7) Run a quick Keyword Search on the Suspect drive before or during the capture.

8) Run Multiple Cellphones/Tablets data Extraction and Analysis using a third-party application on the Windows 10 side.

9) Run the Forensic Triage application with selective capture mode or with the use of a third-party application on the Windows 10 side.

10) Run a full Forensic Analysis application like Encase/Nuix/FTK/Axiom.

11) Run Virtual Drive Emulator to view the Suspect drive before captured (Linux)

12) Run Remote Capture from unopened laptops - Intel-Based CPU (supplied with this unit).

13) Use the Thunderbolt 3.0 port to capture data from Mac using the Thunderbolt-Mac acquisition kit that supports Mac with Thunderbolt 2/3 port or 1394 port, or connect to 10GbE network with the use of TB3.0 to 10GbE adapter.

14) Unlock drives with passcode such ATA, BitLocker, Opal for SED drives

15) Use the SuperImager Plus unit as a “Write Blocker” device: This feature enables the unit to function as a secure bridge between workstations on a network to Suspect drives attached to the SuperImager unit and by using the iSCSI protocol over a network connection. A forensic investigator using a workstation or laptop in one location can access a Suspect drive in different places in the Writes-Block safe mode. The unit will be connected to the same network, and the Suspect drive will be attached to the unit in read-only mode. The unit will act as a “write blocker” for any of the unit’s attached storage, such as SAS, SATA, USB, 1394, FC, SCSI, and NVMe.

Additional operations: HASH authentication, Drive Diagnostics, Evidence drive erase before use, image restores from DD/E01, and automation with scripting.

The main difference between using a product with U.2 port (and with Extension cables) vs. using M.2 port and plugging the media directly into the port:

NVMe U.2 port is more versatile and can support three types of NVMe SSD: M.2, U.2, PCIE NVMe storage controller, while M.2 port is limited to M.2 SSD. Using the U.2 Extension cables protects the unit's NVMe port from overuse and many insertions by plugging the SSD directly into the unit's port and damaging the port. (It is easier to replace an extension cable than the interface board of a damaged port!). Competitors that use NVMe M.2 ports are limited with their supports (Only M.2), and force the user to plug the media directly into the port. U.2 extension cables are very durable and built with high quality and precision, and they exhibit an extreme transfer rate of over 200 GB/min.


Performances:
Mirror Imaging of Samsung MZVPV512HDGL NVMe SSD, with a max speed of
Mirror Imaging of WD 1 TB NVMe SSD, with a max speed of 187 GB/min!

The SuperImager application is optimized to achieve extreme top speeds when using NVMe SSD:
HASH SHA-1 132.5 GB/min, Mirror Image 187 GB/min, Erase + Verify 130 GB/min, Verify 197 GB/min

SuperImager Plus 8" NVMe SATA mix ports unit with i7 CPU, 32GB Memory, and S/W Version 1.8.133.11
Operation: Avg Speed GB/Min
HASH single drive, in a single session (Samsung 870 EVO SSD)
SHA-1 32.1
MD5 32.1
SHA-1+ MD5 32.1
HASH 2 drives in 2 separate sessions (2 Samsung 870 EVO SSD)
SHA-1 + MD5 drive 1 29.0
SHA-1 + MD5 drive 2 29.0
HASH single drive, in a single session (1TB WD black M.2 NVMe)
SHA-1 132.00
SHA-1 + MD5 132.00
Erase Drives using 1TB WD Black M.2 NVMe SSD
Read Verify 202.00
Single Pass - User Erase Mode 153.00
Forensic Imaging
100% bit by bit Imaging 1 TB WD Black to 1 TB WD black M.2 NVMe SSD
no HASH 187.00
with SHA1 HASH 132.00
DD Imaging Samsung 850 EVO SSD to Samsung 850 EVO SSD (2GB Files Chunks and NTFS)
with SHA-1 + MD5 HASH 30.1
DD Imaging SanDisk Extreme II SSD to Samsung 850 EVO SSD 2 GB file Chunks and NTFS)
with SHA-1 + MD5 HASH on 28.5
E01 Imaging Samsung 850 EVO SSD to Samsung 850 EVO SSD (2GB Files Chunks and NTFS)
with SHA-1 + MD5 HASH on 24.2
Features


Accessories
USB3.0 to e-SATA Adapter at Speed of 3GBs Laptop Remote Access & Data Capture Kit for SuperImager units USB3.0 MMC Card reader Mini SATA(mSATA) to SATA Adapter
Our Price: $100.00
Our Price: $25.00
Our Price: $25.00
USB3.0 to e-SATA adapter at speed of 3Gbs. Laptop remote capture kit with the use of SuperImager units USB3.0 MMC reader Mini SATA(mSATA) to SATA Adapter
Micro SATA to SATA Adapter SATA Split Power Cable IDE to SATA Adapters KIT USB3.0 to SATA Adapters - 4 Channel Kit include power - Linux
Our Price: $25.00
Our Price: $10.00
Our Price: $50.00
Our Price: $320.00
Micro SATA to SATA Adapter SATA Split Power Cable IDE to SATA Adapters KIT USB3.0 to SATA 4-Channel kit- Linux
USB3.0 to SATA-3 Adapter - For Linux Thunderbolt 3.0 Expansion Box (PCIE 3.0) M.2 (NGFF) SSD to SATA III B (SATA base only) SATA Split Data Cable
Our Price: $320.00
Our Price: $25.00
USB3.0 to SATA-3 Adapter -  For Linux Akittio Thunderbolt 3.0 to PCIE M.2 (NGFF) SSD to SATA III  B (SATA base only) SATA Split Data Cable
NVMe External adapter SFF 8639 to M.2 and PCIE x4 SuperImager Plus 8" Forensic Kit for T3 unit NVMe Option for Thunderbolt 3.0 Expansion Box
Our Price: $90.00
Our Price: $100.00
NVMe external adapter U.2 (SFF-8639) to NVMe M.2 and PCIE x4 slot SuperImager Plus 8"  T3 Field Forensic Complete Kit with 8"  Touchscreen color LCD display and SAS/SATA-3 and USB3.0 and i7 CPU NVMe single U.2 and M.2 port

Share your knowledge of this product. Be the first to write a review »