Reseda, CA (PRWEB) May 14, 2015 -- The Computer Forensic Field Imaging devices in today’s market are divided into two categories. The first category includes embedded solutions units, with dedicated software and hardware, which are very secure when it comes to malware and virus vulnerability. Those solutions are incomplete, since they are less flexible in adapting to new technologies, and cannot serves as platforms to perform tasks other than pure forensic imaging.
The second category includes PC-based units, which run under OS with integrated hardware and software, to accommodate fast forensic imaging.
Those units run mostly under Windows, whose main benefit is that it allows for versatile functionality, including the ability to use the devices as full mobile investigation platforms, to perform many tasks on the same unit (such as Cellphone/Tablets data extraction and analysis, Computer Forensic Triage data collections, and full computer forensic analysis). Another advantage of PC-based units is their performance, particularly when compared to Laptops and Tablets. The PC-based units are built with strong hardware that will outperform third-party dedicated hardware solutions, running the same Cellphone extraction and analysis applications. Those PC-based units are also saving costs and reducing the need for investigators to carry multiple devices in order to perform complete field investigations.
The new Dual-Boot line has been developed in order to improve the current PC-based units’ performance and security, by including the Linux application for the imaging phase. There are multiple benefits to using Linux OS: Linux is less likely to be targeted by malware and viruses. It is also very efficient, has much less overhead when used with high data transfer rates, and performs better than any other OS. Nevertheless, most of today’s third-party analysis applications still run Windows-based applications. In order to achieve fast and secure forensic imaging on a full investigation platform, MediaClone developed the new SuperImager® Plus units.
The new Linux-based SuperImager® Plus application runs on Linux OS and utilizes and optimizes multiple CPU cores to achieve the most efficient operations, all while performing at incredibly high speeds with EnCase E01/Ex01 format with full compression. The application allows users to manually select and adjust the number of threads and level of compression used during each session.
Saving Forensic Images into E01/Ex01 formats with full compression is widely used operation in the forensic industry, but generally requires a trade-off between speed, space, and time of to decompress by the EnCase application.
Comparative tests show a 20% increase in speed when using the SuperImager® Plus Linux-based application over the SuperImager® Windows-based application. Tests were performed with the same hardware and the same hard disk drives (filled with 43% of random data), and the same level 1 compression. The Linux-based application was set to use 16 compression threads.
The new products use Lubuntu, which allows investigators to use the OS to run other Linux applications.
To allow investigators to use the SuperImager® Plus field units as a complete mobile investigation platform, the new units provide optional dual-boot feature, with Windows 7 as the second OS. When this feature is enabled, the investigator can, after completing forensic imaging, reboot the unit to Windows, and run third-party applications, such as Computer Forensic cellphone data extraction and analysis, Forensic Triage data collections, and full computer forensic analysis.
“Consolidation of computer forensic tools and solutions are a critical aspect of computer forensic field investigation operations. The new line of mobile computer forensic duel-boot units are designed for ease-of-use and to provide multiple forensic imaging capabilities and fast data capture. That makes those tools the much more powerful than its previous generation,” says Ezra Kohavi, President and CEO of MediaClone Inc.
For more information, visit us: http://www.media-clone.net/category-s/1850.htm
Ezra Kohavi, MediaClone, Inc., http://www.media-clone.net, +1 818-654-6286, [email protected]
Share this article