The Forensic Duplicator
Engineered and built to the same quality, durability, and performance standards as Tableau’s write-blockers and hardware accelerators, the Forensic Duplicator is an intelligent alternative to higher-priced disk imaging solutions. The Forensic Duplicator supports hashed (SHA-1 & MD5) duplication of IDE or SATA HDD’s at sustained transfer speeds of up to 6 GBytes per minute.
The Forensic Duplicator is designed for easy, one-button operation. Upon source (write-protected) and destination drive (writeable) connection and power-up, the Forensic Duplicator will verify drive and device information. To start duplication, simply push the enter button. Imaging will begin based upon the user presets entered during initial device setup. Or if you prefer, use the control keys and LCD to select from a menu of available functions. Once duplication begins, progress information is displayed on the 80 character LCD.
The Forensic Duplicator provides the flexibility of cloning (disk-to-disk) or imaging (disk-to-FAT32 file system) hard drives. Source and destination drives may be any combination of SATA or IDE. The Forensic Duplicator supports 1:1 drive duplication and will prompt users when spanning multiple destination drives.
In addition to fast drive duplication, user selectable functions include FAT32 Disk Formatting, Disk Wiping, Disk Blank Check, Display Disk Information, Hash Disk Drives (MD5 or SHA-1), View & Print Logs, and Setup Device Information.
Extend Imaging Capability With Protocol Modules
The Forensic Duplicator has always been great at imaging SATA or IDE hard drives. Now you can image USB, SAS and SCSI storage devices with the Forensic Duplicator by using Protocol Modules. Easy to connect and easy to use, the TDP6 (SAS), TDP4 (SCSI), and TDP8 (USB) protocol modules are sold individually or as a bundle (below).
Our Protocol Module Bundle combines all three Protocol Modules into one value-priced kit so that you're ready to acquire USB, SAS and SCSI interfaces in the field. Simply connect a module to the Forensic Duplicator's SATA input, connect the device that you're imaging to the protocol module, and go!
Please Note: The Protocol Modules are configured for read-only operation and can be used only on the source side of the Forensic Duplicator.
Forensic Duplicator Key Features (v1.0 Firmware)
Disk to Disk Duplication
- Disk to DD File Duplication (FAT32, with the ability to span multiple
destination disks)
- Source Hashing (without duplication)
- Drive-speed/real-time MD-5 and SHA-1 Hashing (simultaneous) for
duplication and hashing
- Destination Wiping (ATA Security Erase, 1-pass wipe, and 3-pass
wipe)
- Destination Disk Formatting
- Source and Destination Blank Check (both automatic and
menu-driven)
- HPA/DCO Support (ability to defeat/remove HPA and/or DCO)
- Native SATA or IDE on the source and destination
- 80 Character User Interface
- 2 USB Ports for Printing and/or Saving Reports to Thumb Drives (Planned for Rev 2)
- 1 Firewire Port for Fast Firmware Updates
- Upgradeable Firmware Offers Expanded Features
Feature Enhancements Provided Via Free Firmware Updates
-
Added support for the TD1 to communicate with the new Tableau TDP8 Forensic USB Protocol Module.
-
Added support for GPT (GUID partition table) and multiple FAT32 partitions. This capability allows the TD1 to access and format disks larger than 2TiB
-
Added feature to display available free space on destination drive within the "Disk Utilities" menu.
-
Removed case prompts from functions where it wasn't needed, such as format and wipe operations.
-
Added support for EnCase .e01 Disk-to-File images.
-
Added support for the following localized languages: German, Spanish, French, and Portuguese. Please note that only TD1 units manufactured after July, 2009 are equipped with the LCD module that supports multi-language characters. All TD1 units with a serial number range of 01D15000 and higher are equipped with this module.
-
-
Support added for FAT32 long filenames.
-
Support added for entering/editing information via an attached USB keyboard.
-
Added new UI prompts for editing case name and image filenames.
-
Added expanded options for configuring alert notification behavior.
-
Added user-selectable EL backlight timeout configuration.
-
Improved performance of source disk error recovery.
-
Logs can now be saved to a USB mass storage device (e.g., a thumb drive) attached to either of the Forensic Duplicator's USB ports.
-
Logs can now be printed to a USB printer device attached to either of the Forensic Duplicator's USB ports.
-
Logs now include the Forensic Duplicator serial number.
-
The duplication status screen now shows multiple performance metrics: instantaneous transfer rate in bytes/second, instantaneous transfer rate in GB/min, average transfer rate in GB/min, total elapsed time and estimated time to completion.
-
Voltage and current monitoring for source and destination drives.
-
Low-voltage warning for power supply.
-
Increased Disk-to-File duplication (imaging) speed.
-
Wipe transfer rate has been unified with duplication / hashing transfer rate.
-
Date and time have been added to the main menu.
|
Performance
One of the primary design goals for the Forensic Duplicator was to achieve data path
transfer rates of 100 MB/s (6 GB/m). The test results below (using rev
1.0 firmware) show that they have been successful in hitting the data
transfer path design goals. The speed of the Forensic Duplicator is drive
limited. Below are the results of our Data Path Transfer Rate Benchmark
testing.
Test Configuration
Western Digital (WD3000GLFS) VelociRaptor Source and Destination Drives
Drive space for the purpose of testing was set to 10.737GB
Testing was performed on the entirety of the 10.737 GB data space
MD5 and SHA-1 hashing were left ON for all tests
Wipe Destination Test
TEST # |
ELAPSED TIME |
CALCULATED DATA RATE |
DISPLAYED DATA RATE |
1 |
|
|
96.4 - 97.0 MB/s |
2 |
|
|
96.4 - 97.0 MB/s |
3 |
|
|
96.4 - 97.0 MB/s |
Hash Source Test
TEST # |
ELAPSED TIME |
CALCULATED DATA RATE |
DISPLAYED DATA RATE |
1 |
|
|
99 - 100 MB/s |
2 |
|
|
99 - 100 MB/s |
3 |
|
|
99 - 100 MB/s |
Disk to Disk Duplication Test
TEST # |
ELAPSED TIME |
CALCULATED DATA RATE |
DISPLAYED DATA RATE |
1 |
|
|
97.6 MB/s |
2 |
|
|
97.6 MB/s |
3 |
|
|
97.6 MB/s |
Included With the Forensic Duplicator
TD1 Forensic Duplicator- TP3 High Output Power Supply
- TC2-8 8" Molex Power Cable (x2)
- TC6-8 8" IDE Signal Cable (x2)
- TC6-2 2" IDE Signal Cable
- TC5-8 8" SATA Power Cable (x2)
- TC3-8 8" SATA Signal Cable (x2)
- TDA5-18 1.8" Drive Adapter
- TDA5-25 2.5" Drive Adapter
- TDA5-ZIF Drive Adapter
- TC20-BNDL ZIF Cable Set
- TDA3-1 MicroSATA Adapter
- TD1 Quick Start Guide
|