The Image MASSter Solo-4 G3 PLUS Forensic Enterprise SATA-3 6Gb/s hard drive data acquisition unit configured with the i7 Processor and Expansion Ready hardware, offers investigators the ability to capture simultaneously at SATA-3 speed from on “Suspect” hard drive to two “Evidence” hard drives. It can also capture from two separate “Suspect” hard drives to two individual “Evidence” hard drives. The unit features a built-in native support for SAS, SATA and USB 3.0 drives. It authenticates the drive copies with SHA-1, SHA-2 and MD5. It also supports IDE, RAID, e-SATA drives as well as a variety of Micro Media flash drives. All the “Evidence” images can be saved as 100% copies, Linux DD images or E01 image files. All “Evidence” hard drives can be encrypted “on-the-fly” during the acquisition process to protect sensitive data during transportation or storage. This forensic hard drive data acquisition unit also offers a built-in Gigabit Ethernet connection allowing users to upload images to Storage Area Networks (SAN) for the purpose of processing and archiving. Additionally the Solo-4 G3 Forensic hard drive data acquisition unit can be used as a great platform for third party cell phone acquisition applications like Paraben, XRY, and more.
Extreme Speed Built for Today’s and Tomorrow’s Hard Drive Technology
Built to work with the fastest hard drives available, the Image MASSter Solo-4 G3 Enterprise Forensic SATA-3 6Gb/s data acquisition unit, authenticates and sanitizes at SATA-3 speed (32 GB/min top capability). This technology not only allows the unit to take advantage of today’s fastest hard drive speeds but also allows the user to be prepared for tomorrow’s future hard drive speed improvements.
One side Protected “Source” Port
For the protection of the user’s original images, the unit provides one standard write protected native SATA/SAS “Suspect” port and one standard write protected native USB 2.0 “Suspect” port for the duplication of up to three “Target” drives.
Multiple “Evidence” Ports
The unit provides three native SATA/SAS “Evidence” ports and three native USB 2.0 “Evidence” ports to allow the user to make up to capture images from a single hard drive into three hard drives. In addition one of the “Evidence” ports can be re-configured by the user to be a write protected port and act as a “Suspect” port. This allows the user to capture from two different “Suspect” drives into two separate “Evidence” drives simultaneously.
The Image MASSter Solo-4 G3 Interprise Forensic SATA-3 6gB/s data acquisition unit is designed with a built-in support to connect to an Expansion Box, and provides the capability to capture data from additional devices which have interfaces not natively available on the Imagae MASSter Solo-4 Forensic SATA-3 6Gb/s data acquisition unit. The Expansion box is configured with the following hardware:
- FireWire 1394 PCI-Express card for connecting 1394A (1Port) or 1394B (2 Ports) mass storage devices.
- SCSI Ultra320 PCI-Express card for connecting SCSI mass storage devices. The Image MASSter Solo-4 Forensic SATA-3 6Gb/s data acquisition unit can capture from 2 SCSI “Suspect” drives simultaneously with no speed degradation(*)
- PCI-Express to ExpressCard 34 Reader for connecting a broad range of Express Card compliant cards, such as Express Card USB 3.0 adapter cards then enable user to connect USB 3.0 mass storage devices (**)
(*) External Multi-Output Power Adapter (not supplied) is required to power the second SCSI drive when capturing 2 “Suspect” SCSI drives to two “Evidence” drives simultaneously. It is also recommended to use the External Multi-Output Power Adapter to power two or more external drives connected to the Expansion Box.
(**) ExpressCards are not supplied with the Expansion Option.
Also the expansion box can be configured to support other controllers and interfaces like support for Fiber Channel drives
“On the fly” Drive Image Encryption(*)
Utilizing the built-in AES256 Encryption Technology the Image MASSter Solo-4 Forensic SATA-3 6Gb/s data acquisition unit encrypts with minimal speed degradation all digital data during the Acquisition Process for the purpose of safe guarding sensitive information. The Image MASSter Solo-4 Forensic SATA-3 6Gb/s data acquisition unit creates a secure key with a user-chosen pass phrase. An AES256 encryption key is then generated by the Image MASSter Solo-4 Forensic SATA-3 6Gb/s data acquisition unit and can be saved to any USB thumb drive. The encrypted drive can be decrypted on the fly utilizing the Image MASSter Solo-4 Forensic Sata-3 6Gb/s data acquisition unit or any regular PC loaded with the ICS free decryption utility and the USB thumb drive containing the saved key. User can then safely image the decrypted data to an additional “Evidence” drive. The Image MASSter Solo-4 Forensic SATA-3 6Gb/s data acquisition unit supports the AES256-bit block cipher Encryption Standard, which has been approved by NIST and chosen in the US as the government standard. The Image MASSter Solo-4 Forensic SATA-3 6Gb/s data acquisition unit AES Encryption Algorithm is hardware based and is embedded and implemented directly through the unit’s VIA Nano Processor. VIA Technologies, VIA Nano Processor has been validated as correctly implementing the AES algorithm as indicated in the attached NIST report titled, “The Advanced Encryption Standard Algorithm Validation List.” See Validation #1229.
* This process is NOT compatible with the DiskCypher product line
Windows 7 Operating System
The Image MASSter Solo-4 Forensic SATA-3 6Gb/s data acquisition unit runs on the highly stable and proven Windows 7 Operating System. Unit can be customized to individual organization needs upon request.
Supports single pass or full DoD drive “Sanitizing”.
Multiple Hash Verification
The Image MASSter Solo-4 Forensic data acquisition unit can authenticate an image using SHA-1, SHA-2, MD-5 of the captured “Suspect” hard drive on the fly.
Uploads “Suspect” Images to Network Storage
With the use of the Image MASSter Solo-4 Forensic SATA-3 6Gb/s data acquisition unit, user can upload “Suspect” drive Data Images to Networked Storage Area using 1 Gigabit Ethernet Connection for the purpose of sharing, processing and archiving forensic capture data over the network.
Preview Data directly on the Image MASSter Solo-4 Forensic G3 SATA-3 6Gb/s data acquisition unit
User can preview active files on the “Suspect” hard drive utilizing Windows 7 file viewers.