Description

The SuperImager® Plus Desktop XL Supreme with 16 SAS/SATA, 4 U.2 NVMe, 10 USB3.2, 2 10GbE ports Forensic Imaging unit is the latest generation of MediaClone desktop Forensic solutions; it is a standalone forensic imaging device that can perform multiple Forensic imaging and network uploads at extreme speed. Designed for a lab, it allows an operator to capture data from various source drives and cellphones with different interfaces to multiple target drives simultaneously and upload them to a network extremely fast. It is a great tool for labs with a large backlog in forensic imaging, and this unit can image 15 drives to 15 drives simultaneously. It also can simultaneously capture data from multiple cell phones very fast and view the data on spot (logical extraction). The main unit is industrial and durably built desktop-style, designed with easy-to-use touchscreen icons, and has 8 SAS/SATA+ 4 U.2 NVMe ports, 10 USB3.2 ports, and 2 10GbE ports for a fast connection to a network. It is supplied with 8 SAS/SATA ports Expansion Box (cable-less slots). The unit can be expandable to 40 SAS/SATA ports.
The SuperImager’s main application (the unit’s software) supports many imaging methods like Mirror Image, Encase E01/Ex01, Linux-DD, and AFF4.

Here are some of the tasks the unit can be used for:

1) Multiple Parallel Forensic Capture: Mirror (bit by bit), Linux-DD, E01/Ex01 (with full compression) formats, Mixed-Format DD/E01, AFF4, copy the whole drive or only part of it.

2) Run a Selective Imaging (Targeted Imaging) of files, folders, and partitions with file extension filters, including metadata and HASH. For example, run 8 independent sessions of E01 capture with 16 native SAS/SATA ports and 16 E01 compression engines simultaneously. Also run simultaneously logical data extraction from many smartphones.

3) Perform Forensic Imaging from many Suspect drives to one large Evidence drive; in append mode (can perform forensic imaging from 15 Suspect drives to one large Evidence drive).

4) Upload many Forensic images to a network (SMB, CIFS, NFS).

5) Erase data from Evidence drive – using DoD (ECE, E), Security Erase, Enhanced Security, or Sanitize Erase protocols.

6) View the data directly on the Ubuntu Desktop screen.

7) Encrypt the data while capturing (using the AES256 engine).

8) HASH the data while capturing – simultaneously run all the 4 HASH engines: MD5, SHA-1, SHA-2, and SHA-512.

9) Run a quick Keyword Search on the Suspect drive before capture.

10) Run Multiple Cellphone/Tablets data Extraction and Analysis using a third-party application on the Windows 11 side.

11) Run a Forensic Triage application (Windows 11) to capture and view the targeted data.

12) Run a full Forensic Analysis application like Encase/Nuix/FTK/Axion.

13) Run Virtual Drive Emulator before the data is captured (Linux).

14) Encryption AES256 XTS and Decryption on the fly of drives that contain sensitive information.

15) Easily reconfigure the unit’s ports, where each target port can be reconfigured as a source or target, enabling the user to run 10:10 sessions or upload 16 images to a network.

16) Convert the unit’s 10 USB3.2 ports to SATA ports and run additional imaging (using some USB3.0 to SATA adapters – good for SSD that do not need external power).

17) Built-in fast writes-protect hardware performing at full bandwidth.

18) Use the unit as a “Write Blocker” device: This feature enables the SuperImager unit to function as a secure bridge between workstations on a network to Suspect drives attached to the SuperImager unit by using the iSCSI protocol over a network connection.

A forensic investigator using a workstation or laptop in one location can access a Suspect drive in different places in the Write block mode.

This unit is not expandable.

The SuperImager unit will be connected to the same network, and the Suspect drives will be attached to the SuperImager unit in read-only mode. The SuperImager unit will act as a “write blocker” for any of the unit’s attached storage, such as SAS, SATA, USB, 1394, FC, SCSI, and NVMe.

The unit is designed to help expedite the forensic imaging process, especially in facilities with a large backlog in imaging drives, by performing parallel forensic imaging in a true optimized multiple session’s application.