Home > Line of Products ↓ >

SuperImage Plus Complete Portable Rugged Forensic Lab with 10GbE

SuperImager Plus Portable Rugged Forensic lab - 15.6" LCD display and 4 SAS/SATA, 4  U.2 NVMe , TB4, and 10 Gigabit Ethernet
SuperImager Plus Complete Portable Rugged Forensic Lab - multiple simultaneous Imaging and analysis unit.


 
Alternative Views:


The SuperImager Plus, Complete Rugged Portable Forensic Lab unit, is configured with Dual Open OS of Linux for multiple simultaneous parallels and independent of forensic imaging with extreme performances and Windows 10 for a full forensic investigation like Forensic Analysis, Triage, Cellphone data extraction, and more. The unit is Portable, Compact, easy to carry when traveling, has a large 15.6” display, and extremely performing hardware (Read speed from NVMe SSD can reach above 200GB/min). It is built with 12 generations of i7 CPU, 4 NVMe U.2 ports (supports both U.2 and M.2), 4 SAS/SATA ports, 7 USB3.2 Gen2, 2 Thunderbolt 4.0, 10 Gigabit/s Ethernet ports, and speakers and audio.

Product Code: SIR-0050-00A
Qty:

Description Technical Specs Extended Information
 
The SuperImager Plus Portable Rugged Portable Digital Forensic Lab with 10GbE is a forensic imaging device that can serve as a complete Field Computer Forensic Investigative platform. The unit built with 15.6" LCD, 4 SAS/SATA ports, 4 U.2 NVMe ports, one e-SATA port, 2 Thunderbolt 4.0 ports, 8 USB 3.2 ports, and one 10 GbE port. It is configured with Dual Open OS (Linux for fast imaging/Win10 for forensic analysis and cellphone data extraction); under Linux, the user can run multiple parallel simultaneous Forensic Imaging (mirror image, image a single partition, Linux-DD, EnCase, mix E01/DD, VHD, Triage of Files and Folders), with 4 HASH values (MD5, SHA1, SHA2, and SHA512 run all the four at the same time), encryption, compression, keyword search all on the fly and save images to a RAID or a network. Under Win 10 the user can perform a full Forensic analysis using third-party applications like EnCase, Nuix, Axiom, and other apps, multiple cellphone data capture using Cellebrite, MSAB, and Oxygen apps, RAID reconstruction, network analysis, and more.

The unit hardware is very robust, running i7 12 generation CPU (5.0 GHz, 12 Cores), the 15.6" large display helps visualization when running a full Forensic analysis software, and the rugged case makes it easy to carry when traveling.

Total ports:

• one e-SATA port on the main unit

• 4 SAS/SATA ports (In a drop drive socket) supplied with power & data

• 4 NVMe ports: 4 native U.2 NVMe ports, including 4 M.2 to U.2 vertical adapters with special and easy SSD locking mechanism, U.2 Extension cables, and secure brackets supporting all the three (U.2, M.2, PCI-E) NVMe SSD

• 7 USB3.2 Gen2 (10Gigabit/s), 1 USB3.2 Gen1 ports

• 2 Thunderbolt 4.0 ports (one TB port can be used with supplied TB to HDMI adapter to plug to external monitor, the other can be used to plug optional TB to PCIE Expansion box adding more ports like 4 SAS/FC/SCSI)

The unit's main purpose is to run simultaneous multiple Forensic imaging onsite for capturing data from SAS/SATA/USB/NVMe drives in a cross-media capture and Upload the images to a local network. The second purpose is to complete the Forensic investigation onsite by performing a full Forensic analysis of the captured data, cellphone data extraction and more tasks

The unit supplied with:

• Remote Capture KIT.

• Virtual Emulator (for viewing the Suspect drive before the capture).

• Mac/Thunderbolt kit - Capture from Mac with TB2/TB3, 1394 ports

Some speed tests:

SATA to SATA Linux-DD copy max speed 32.7GB/min.

NVMe to NVMe mirror image max speed 187GB/min. (see attached pictures)

The SuperImager’s main application (the unit’s software) supports many imaging operations. Here are some of the tasks that the user can use it for:

1) Multiple Parallel Forensic Imaging: Supports Mirror Copy (bit by bit), Linux-DD copy , E01/Ex01 (with full compression) copy, Mixed-Format DD/E01, Select and image a single partition, and Selective Capture (copy files and folders with the use of file extension filters, including HASH of each file and capture of each file metadata).

2) Erase data from Evidence drive: Using DoD (ECE, E), Security Erase, NVMe Format, and Sanitize Erase protocols.

3) View the data directly on the Ubuntu Desktop screen.

4) Encrypt the data while capturing (with AES256).

5) HASH the data while capturing – run the four MD5, SHA-1, SHA-2, and SHA512 HASH engines simultaneously.

6) Run a quick Keyword Search on the Suspect drive before capture.

7) Run Multiple Cellphone/Tablet data Extraction and Analysis.

8) Run a Forensic Triage application.

9) Run a full Forensic Analysis application like Encase/Nuix/FTK/Axiom.

10) Run Virtual Drive Emulator.

11) Run Remote Capture from unopened laptops (Intel Based CPU).

14) Unlock drives with ATA pass-code, BitLocker pass-code, Opal pass-code for SED drives

15) Use the unit as a “Write Blocker” device: This feature enables the unit to function as a secure bridge between workstations on a network to Suspect drives attached to the unit by using the iSCSI protocol over a network connection. A forensic investigator using a workstation or laptop in one location can access a Suspect drive in different locations in the Write block mode. The unit will be connected to the same network, and the Suspect drives will be attached to the unit in read-only mode. The unit will act as a “write blocker” for any of the unit’s attached storage, such as SAS, SATA, USB, 1394, FC, SCSI, and NVMe.

Additional available operations: Erase verification on a drive that erased, Full or Quick Format, HASH a drive, drive diagnostics, and automated process with scripting. The application supports forensic imaging of multiple drives in simultaneous forensic imaging sessions. The Optional TB expansion box enables the user to connect to a 10 Gigabit/s network, to an external HDMI monitor, or to plug in additional optional storage controllers (SAS, SCSI, 1394, and FC) to support imaging from more storage devices.
The main difference between using a product with U.2 port (and with Extension cables) vs. using M.2 port and plugging the media directly into the port: NVMe U.2 port is more versatile and can support three types of NVMe SSD: M.2, U.2, PCIE NVMe storage controller, while M.2 port is limited to M.2 SSD. Using the U.2 Extension cables protects the unit's NVMe port from overuse and many insertions by plugging the SSD directly into the unit's port and damaging the port. Competitors that use NVMe M.2 ports are limited with their supports (Only M.2), and force the user to plug the media directly into the port. The U.2 extension cables are very durable and built with high quality and precision, and they exhibit an extreme transfer rate of over 200 GB/min.
The SuperImager application is optimized to achieve extreme top speeds when using NVMe SSD: HASH SHA-1 132.5 GB/min, Mirror Image 187 GB/min, Erase + Verify 130 GB/min, Verify 197 GB/min
Operation Avg Speed GB/Min
HASH single drive, in a single session (Samsung 870 EVO SSD)
SHA-1 32.1
MD5 32.1
SHA-1+ MD5 32.1
HASH 2 drives in 2 separate sessions (2 Samsung 870 EVO SSD)
SHA-1 + MD5 drive 1 29.0
SHA-1 + MD5 drive 2 29.0
HASH single drive, in a single session (1TB WD black M.2 NVMe)
SHA-1 132.00
SHA-1 + MD5 132.00
Erase Drives using 1TB WD Black M.2 NVMe SSD
Read Verify 202.00
Single Pass - User Erase Mode 153.00
Forensic Imaging
100% bit by bit Imaging 1 TB WD Black to 1 TB WD black M.2 NVMe SSD
no HASH 187.00
with SHA1 HASH 137.00
DD Imaging Samsung 850 EVO SSD to Samsung 850 EVO SSD (2GB Files Chunks and NTFS)
with SHA-1 + MD5 HASH 30.1
DD Imaging SanDisk Extreme II SSD to Samsung 850 EVO SSD 2 GB file Chunks and NTFS)
with SHA-1 + MD5 HASH on 28.5
E01 Imaging Samsung 850 EVO SSD to Samsung 850 EVO SSD (2GB Files Chunks and NTFS)
with SHA-1 + MD5 HASH on 24.2
SuperImager Plus Complete Portable Forensic Lab - Linux
SuperImager Plus Complete Portable Forensic Lab - Windows side
Features


Samples of SATA to SATA log file show max speed of complete Linux-DD imaging session

Samples of NVMe to NVMe log file show max speed of complete Linux-DD imaging session


Accessories
Laptop Remote Access & Data Capture Kit for SuperImager units SATA Split Data Cable USB3.0 to e-SATA Adapter at Speed of 3GBs USB3.0 to SATA-3 Adapter - For Linux
Our Price: $100.00
Laptop remote capture kit with the use of SuperImager units SATA Split Data Cable USB3.0 to e-SATA adapter at speed of 3Gbs. USB3.0 to SATA-3 Adapter -  For Linux
Mini SATA(mSATA) to SATA Adapter SATA Split Power Cable USB3.0 to SATA Adapters - 4 Channel Kit include power - Linux USB3.0 MMC Card reader
Our Price: $25.00
Our Price: $10.00
Our Price: $320.00
Our Price: $25.00
Mini SATA(mSATA) to SATA Adapter SATA Split Power Cable USB3.0 to SATA 4-Channel kit- Linux USB3.0 MMC reader
NVMe Option for Thunderbolt 3.0 Expansion Box IDE to SATA Adapters KIT Micro SATA to SATA Adapter SAS 4 ports option for Thunderbolt Expansion Box
Our Price: $499.00
Our Price: $50.00
Our Price: $25.00
Our Price: $800.00
NVMe single external port IDE to SATA Adapters KIT Micro SATA to SATA Adapter SAS 4 Ports Option for TB 3.0 Expansion Box
Thunderbolt 3.0 Expansion Box (PCIE 3.0) M.2 (NGFF) SSD to SATA III B (SATA base only)
Our Price: $320.00
Our Price: $25.00
Akittio Thunderbolt 3.0 to PCIE M.2 (NGFF) SSD to SATA III  B (SATA base only)

Share your knowledge of this product. Be the first to write a review »