For the protection of the user's original images, the unit provides one standard write protected native SATA/SAS "Suspect" port and one standard write protected native USB 2.0 "Suspect" port for the duplication of up to three "Evidence" drives.
The Image MASSter Solo-4 G3 PLUS Enterprise Forensic data acquisition unit is designed with a built-in support to connect to an Expansion Box
, and provides the capability to capture data from additional devices which have interfaces not natively available on the Image MASSter Solo-4 G3 PLUS Entrerprise Forensic data acquisition unit. The Expansion box is configured with the following hardware:
1) FireWire 1394 PCI-Express card for connecting 1394A(1 Port) or 1394B(2 Ports) mass storage devices.
2) SCSI Ultra320 PCI-Express card for connecting SCSI mass storage devices. The Image MASSter Solo-4 PLUS Enterprise Forensic data acquisition unit can capture from 2 SCSI "Suspect" drives simultaneously with no speed degradation(*).
3) PCI-Express to ExpressCard 34 Reader for connecting a broad range of Express Card compliant cards, such as Express Card USB 3.0 adapter cards than enable user to connect USB 3.0 mass storage devices(**).
(*)External Multi-Output Power Adapter
(not supplied) is required to power the second SCSI drive when capturing 2 "Suspect" SCSI drives to two "Evidence" drives simultaneously. It is also recommended to use the External Multi-Output Power Adapter
to power two or more external drives connected to the Expansion Box.
(**)ExpressCards are not supplied with the Expansion Option.
Also the Expansion Box can be configured with other controllers to support different interfaces such as the support for Fiber Channel drives.
"On the fly" Drive Image Encryption*:
Utilizing the built-in AES256 Encryption Technology the Image MASSter Solo-4 PLUS Forensic data acquisition unit encrypts with minimal speed degradation all digital data during the Acquisition Process for the purpose of safe guarding sensitive information. The Image MASSter Solo-4 G3 PLUS Forensic data acquisition unit creates a secure key with a user-chosen pass phrase. An AES256 encryption key is then generated by the Image MASSter Solo-4 G3 PLUS Forensic data acquisition unit and can be saved to any USB thumb drive. The encrypted drive can be decrypted on the fly utilizing the Image MASSter Solo-4 G3 PLUS Forensic data acquisition unit or any regular PC loaded with the ICS-JMR free decryption utility and the USB thumb drive containing the saved key. User can then safely image the decrypted data to an additional "Evidence" drive. The Image MASSter Solo-4 PLUS Forensic data acquisition unit supports the AES256-bit block cipher Encryption Standard, which has been approved by NIST and chosen in the US as the government standard. The Image MASSter Solo-4 G3 PLUS Forensic data acquisition unit AES Encryption Algorithm is hardware based and is embedded and implemented directly through the unit's VIA Nano Processor. VIA Technologies, VIA Nano Processor has been validated as correctly implementing the AES algorithm as indicated in the attached NIST report titled,"The Advanced Encryption Standard Algorithm Validation List." See Validation # 1229.
* This process is NOT compatible with the DiskCypher product line.
Windows 7 Operating System: The Image MASSter Solo-4 G3 PLUS Forensic data acquisition unit runs on the Windows 7 64-Bit Home Premium O/S Environment. Unit can be customized to individual organization needs upon request.
Drive Wiping: Supports single pass or full DoD drive "Sanitizing".
Multiple Hash Verifications: The Image MASSter Solo-4 G3 PLUS Forensic data acquisition unit can authenticate an image using SHA-1, SHA-2, MD-5 of the captured "Suspect" hard drive on the fly.
Uploads "Suspect" Images to Network Storage: With the use of the Image MASSter Solo-4 G3 PLUS Forensic data acquisition unit, user can upload "Suspect" drive Data Images to Networked Storage Area using 1 Gigabit Ethernet Connection for the purpose of sharing, processing and archiving forensic capture data over the network.
Preview Data directly on the Image MASSter Solo-4 Forensic G3 PLUS data acquisition unit: User can preview active files on the "Suspect" hard drive utilizing Windows 7 file viewers.