Image MASSter™ Solo 5 Basic Forensics
Validated Speeds of 25GB/min
The new Image MASSter™ Solo-5 Basic Forensic Product Line offers a lower and slimmer profile design than the current IMSolo-4 G3 Plus Product Line with similar features using today’s Advanced Acquisition technology offering the same High Speed support for 6Gb/s SAS-2 and SATA-3 drives. The design provides for a fast, reliable and versatile Forensic Handheld Data Acquisition Tool. The IMSolo-5 Basic also replaces the IMSolo-4 G3 Slim Product Line. Sharing the same footprint and features as the IMSolo-4 G3 Slim Product Line, the new Product Line also offers improved reliability with a new internal design. The new IMSolo-5 Basic offers a more powerful processor than the original IMSolo-4 Generation-1 and 2 Product Line, providing higher Performance for Forensic Data Acquisition and Analysis Operations. The units offer native support for SAS, SATA and USB 3.0.
The unit’s Key Features include the capability of imaging multiple “Suspect” drives to multiple “Evidence” drives simultaneously. Capture Suspect drive’s data in LinuxDD, E01 or EX01 Segmented File Format or as a “mirror” capture. The Image MASSter™ Solo 5 Basic supports SHA-1 and SHA-2 Accelerated Drive Hash methods as well as the standard MD5 Hash method. With built-in Hard Drive Encryption support, target drive’s data can be secured utilizing the NIST approved AES-256 Encryption standard. The units are configured with a 1Gbit Ethernet port for Network Connectivity support. The IMSolo-5 Basic units are also designed with a slide out system drive for easy removal.
High-end Processing Power: The Image MASSter™ Solo 5 Basic units are supplied with a powerful INTEL™ CPU to handle today’s most demanding Forensic Acquisition and Analysis tasks.
Advanced SATA-3 Technology: Implements support for 6Gb/s SAS-2 and SATA-3 drives using 6Gb/s SATA-3 SAS Controller technology. The unit is designed to acquire today’s High Performance drives and prepares the user with the hardware necessary to take advantage of tomorrow’s hard drive speed improvements. The unit’s advanced Duplication Technology provides the capability of performing multiple operations simultaneously. Capture and Wipe standard SAS/SATA drives with speeds up to 32 GB/min.
Hard Drive Support: Offers native support for SAS, SATA, and USB 3.0 drives. Optional adapters are available to support IDE Drives*, Micro SATA*, e-SATA Drives*, 2.5”, 1.8” IDE Notebook Drives*, ZIF drives*, SATA M.2* and Flash media*.
*Available for purchase/Optional Adapters Required
Multiple I/O Ports: The IMSolo 5 Basic offers a total of 13 I/O external ports for data acquisition. These include 4 SAS/SATA, 6 USB 3.0, 2 eSATA, and one 1Gbit Ethernet port. Two SATA/SAS ports and 2 USB 3.0 ports are dedicated for the Suspect Drive Positions. Mixed Drive Interface support allows seizing data between different drive interface types (ie. Use IDE “Suspect” drive with a SATA “Evidence” drive). All “Suspect” Drive ports are permanently write-protected to prevent altering “Suspect” Drive Data. The Write-Protect properties of the Suspect ports cannot be disabled.
Multi-Session Capability: Capture multiple Source drives simultaneously or run multiple operations simultaneously. With a total of 13 I/O ports, the IMSolo 5 Basic family has the capability of supporting the simultaneous acquisition of up to 12 storage devices.
Multiple Operational Modes: – Single Capture: Creates “Mirror” image of the Suspect’s drive. – LinuxDD Capture: Supports storing one or multiple Suspect drive images on a single “Evidence” drive using the standard Linux DD Segmented File Format. – E01 Capture: Supports storing one or multiple Suspect drive images on a single “Evidence” drive using the Encase® Forensics Segmented File Formats E01 and EX01. – IQ Copy*: Optional Non-Forensic Format used to capture only the allocated data of a Suspect’s drive, greatly reducing the time required to capture data. In addition, it can be used to duplicate drives for IT purposes such as backup, deploy and upgrade to larger capacity drives. – WipeOut: Sanitize drives using Single Pass, DoD Standard, or Secure Erase. The unit has the ability to capture and wipe hidden HPA or DCO areas which may exist on hard drives.
* The IQCopy Option is purchased separately.
Multi-Op Mode: Allows seizing in LinuxDD or E01 and Single Capture formats in one operation using the same Suspect drive.
Multiple Hash Verification Methods: The Image MASSter™ Solo 5 Basic Forensic supports SHA-1 and SHA-2 Hash Acceleration and Software based MD5 Hashing.
Slide-Out System Drive: The unit offers an External, Slide-Out System drive for easy removal.
Remote Access: Using the unit’s built-in Remote Desktop application or 3rd Party Remote Access applications, multiple units can be remotely accessed to control the unit’s operation.
External Storage: Images can be stored externally to a Shared Network folder, e-SATA drive, USB drive or an ICS DFSS External Storage Module.
Upload and Download Images to Network Storage Area: Images files can be uploaded and downloaded to a Network Storage Area allowing the user to take advantage of large storage platforms for the purpose of processing and archiving images. With the use of the Optional 10 Gigabit Ethernet connection, units can copy and upload at speeds exceeding 4GB/min.
“On the fly” Drive Image Encryption*: Utilizing the built- in AES 256 Encryption Technology the Image MASSter™ Solo 5 Basic Forensic encrypts with minimal speed degradation all digital data during the Cloning Process for the purpose of safe guarding sensitive information.
* This process is NOT compatible with the DiskCypher product line
ICS Digital Forensic Storage Solutions (DFSS): The Image MASSter™ Solo 5 Basic supports the use of the Optional ICS DFSS Modules to provide additional Storage capacity.
LinkMASSter Option: The LinkMASSter Option allows the Forensic Investigator to acquire data from unopened computers using the Ethernet interface.
Preview Suspect Data: Preview Suspect Drive’s data utilizing third party applications or using the unit’s built-in O/S utilities. The unit’s preview capability allows previewing Word, Excel, PDF, text or multimedia (pictures, video and audio) files prior to seizing data.
Logs and Auditing: Store and print detail operational Event Log and Audit Trail information. The Audit Trail is saved in a PDF format using 128-bit password encryption protection.
Cell Phone Acquisition Support: The unit can be used to acquire Cell Phone data utilizing optional 3rd Party Cell Phone Acquisition Software and Hardware solutions. The units support the Micro Systemation XRY and Paraben’s Device Seizure Cell Phone Acquisition Solutions.
Convenient and Easy Upgrades: Easily updates Software through the USB port. Free Software Updates are provided periodically.
8” Full Color Touch screen: Built-in touch screen eliminates the need of connecting an external monitor, mouse or keyboard.
Lock Setting: Provides lock setting for secure operation.
Image Restore: Restore a previously captured DD or E01 Image to a fully bootable 100% working copy.
Note: Specifications are subject to change.