Image MASSter™ Solo-4 Forensic Hand-Held Duplicator

Product Number:
IM Solo-4 Forensic - F.GR-0035-000E
IM Solo-4 Forensic Expansion Ready - F.GR-0035-900E
IM Solo-4 IT Super Kit - F.GR-0043-000B

Available on GSA Contract Number GS-02F-0093V. The GSA Contract Price is $2,523.00 Delivered.

At full SATA-2 speeds, Image MASSter™ Solo-4 Forensic Hand-Held Duplicator offers investigators the ability to image one "Suspect" to two "Evidence" drives or two separate "Suspect" drives to individual "Evidence" copies simultaneously.

The imaging process is concurrently authenticated with SHA-1 and SHA-256 hash values with no speed degradation.

Solo-4 comes with standard built-in support for SAS, SATA, RAID, e-SATA and USB drives as well as a variety of Micro Media cards. IDE drives are also supported with the ICS IDE to SATA adpater which comes included in the price. 

Options include a 3-SLOT PCI-e Expansion Box (factory install) that offers the ability to connect any combination of 3 of the following cards: SCSI - 1 port Bus Card to support SCSI drives, Multimedia Express Card Bus / Memory card reader (12-in-one), Solid State Express Card Drive, 1394B - 2 port FireWire Express Card to support FireWire drives or Wi-Fi Wireless Express Card.

All evidence drives can be encrypted "on-the-fly" during the acquisition process to protect sensitive data during transportation.

Features

Extreme Speed Built for Today's and Tomorrow's Hard Drive Technology: Built to work with the fastest hard drives available, Solo-4 captures, authenticates and sanitizes at SATA-2 speed (18 GB/min top capability). This technology not only allows the unit to take advantage of today's fastest hard drive speeds but also allows the user to be prepared for tomorrow's future hard drive speed improvements.

Multiple "Suspect" Side Connections: 2 SATA/SAS connections and 1 USB 2.0 connection. Unit features built-in support for imaging of a RAID drive pair (0,1,JBOD).
Optional Drive Adapters will allow imaging of IDE drives, 1.8", 2.5" ZIF, and proprietary interface/Laptop drives, and Micro Media Cards including Compact Flash, Memory Sticks, SD, Micro SD, MultiMedia cards, etc.
Cross Copy support allows user to image any "Suspect" Drive interface to any "Evidence" Drive Interface.
All "Suspect" Drive connections are permanently write-protected at all times to prevent changing of "Suspect" Data (cannot be disabled)

Multiple "Evidence" Side Connections: 2 SATA/SAS connections and 2 USB 2.0 connections. Optional Drive Adapters will allow imaging to many other drive formats including external RAID devices.

Multiple Operational Modes: Captures "Suspect" drives to one "Evidence" Drive (Single Copy Mode), Captures "Suspect" drive to two "Evidence" drives (Multi Copy Mode), Captures two "Suspect" Drives to two "Evidence Drives (Parallel Copy), Drive Wiping and Sanitization, Drive Hashing (SHA-1, SHA-256), Captures "Suspect" Data from Networked Storage and any attached Network Share. All processes are done simultaneously with no speed degradation.

Multiple Imaging Formats: 100% Copy (bit-by-bit), Linux DD images (industry standard) on a single "Evidence" Hard Drive or USB storage device. User can define the seize of the Linux DD segments. IQ Copy, captures the actual "data only" greatly reducing the time needed to make a non-forensic copy. Support of E01 files coming October 2009

'On the fly" Drive Image Encryption: Built-in DiskCypher technology allows the full encryption (AES 256) of Forensic Images. The process is done without speed degradation during the acquisition process.

Windows XP Operating System: Solo-4 runs on the highly stable and proven Windows XP Operating System. Unit can be customized to individual organization needs upon request.

Drive Spanning: Solo-4 allows for the imaging from one large "Suspect" Drive to multiple smaller "Evidence" Drives.

Linux DD Restore: Restore a previously captured DD Image to a fully bootable 100% working copy.

Drive Wiping: Supports single pass or full DoD Sanitization.

Multiple Hash Verifications: SHA-1, SHA-256, MD-5

Intuitive Easy to use Interface: 8" Full Color, user friendly touch screen.

Captures Suspect Data from Network Storage: Solo-4 forensically captures "Suspect" Data from Networked drives and folders using 1 Gigabit Ethernet Connection.

Uploads "Suspect" Images to Network Storage: Solo-4 forensically uploads "Suspect" Data Images to Networked Storage Area using 1 Gigabit Ethernet Connection for the purpose of processing and archiving forensic images.

Preview "Suspect" Data directly on the unit: Preview active files on the "Suspect" Drive utilizing a built-in file viewer.

Software

The following software features come standard with the IM Solo-4 Forensic unit:

Device Configuration Overlay (DCO) Option: DCO can be used to hide and protect a portion of the drive’s area from the operating system and file system. If DCO is detected on a Suspect’s drive, the IM Solo-3 Forensic's seizure operation will capture the DCO hidden sectors.

Host Protected Area (HPA) Option: An HPA area may exist on a drive, hiding a certain portion of the drive’s contents from the operating system and file system. If an HPA area exists on a Suspect’s drive, the IM Solo-3 Forensic's seizure operation will detect and capture data from the HPA area.

WipeOut DoD Option: WipeOut was designed to meet the U.S. Department of Defense specification DOD 5220-22M regarding the sanitization of hard disk drive data. Three iterations are performed to completely erase data and the contents of a hard disk drive. Each iteration makes two write passes over the entire drive.

WipeOut Fast Option: The WipeOut Fast option provides a quick non-DoD method of sanitizing a drive of all previously stored data.

Linux-DD Capture Option: The LinuxDD Capture option captures data as individual “LinuxDD” segmented files. This option also allows multiple data capture to be performed using the same Evidence drive.

100% Copy: Bit-by-bit Copy

IQ Copy (FAT, NTFS, Linux, OSX, UTF, VTM): Captures "actual data" only greatly reducing the time needed to make a non-forensic copy for back-up or mass duplication purposes

"On the fly" Dirve Image Encryption: Built-in DiskCypher software allows the encryption of "Evidence" Images during the acquisiton phase. 

"IN THE BOX"

Solo-4 Stand Alone Unit
4 SAS Data Cables and Power cables
1 SATA to IDE Adapter
1 IDE Data Cable
1 IDE Power Cable
1 2.5” Drive Adapter
1 PS 150watt
1 Power Cord