Home page
Emergency Help
Evolution of Forensic Computing
Evidential Hardware
Evidential Software
Password Cracker
Computer Electronic Disclosure
Training
Literature Requst
Investigation Services
Laboratory Services
Computer Forensic Systems

Computer Forensic Hardware

Vogon's computer forensic hardware allows evidentially sound copies to be made of all areas of a computer’s hard drive. This is the method accepted for the production of computer based evidence by the major law enforcement agencies in the UK and around the world. The image secured is as close a representation of the original hard disk as possible. Indeed, it is argued by many that it is better than the original. The image allows you to access data of which the original user was unaware or thought deleted.

Vogon provides two ranges of imaging hardware for computer investigation professionals:
Mobile Imaging Systems Windows based high performance Imaging Systems based on a high performance mobile or laboratory workstation PC. The image may be recorded DAT, LTO media or disk file. Two images may be recorded simultaneously. A special feature of these systems is the automatic write-protection of the target or suspect hard drive. Images created may then be uploaded to a workstation PC for processing using the unique Processing and Investigation Software.

Dual DAT Imager Legacy DOS based Imagers, based upon the clean boot method of operation. The image is recorded directly to DDS DAT (digital data storage – digital audio tape). Two images may be recorded simultaneously. Images created may then be uploaded to a workstation PC for processing using the unique Processing and Investigation Software.

Complete Computer Forensic Workstations are available to support the widest range of computer investigation requirements:
Forensic Workstation These combine the features of the high performance imaging systems described above with the unique Processing and Investigation Software. These mobile or laboratory based forensic workstations are based on a top-of-the range PC and are designed to provide a complete forensic computing facility. They can be further tailored to suit individual requirements

As an alternative to processing, a clone disk may be produced for direct viewing or investigation under normal operating system control:
LTO Disk Emulator Automated production of clone disk can be achieved using a Vogon Disk Emulator. This specialised hardware allows direct access to the image as though it was the original suspect or target media. Access can be set to read/write or read-only depending on the requirements of the investigation. The original image held on tape media is unchanged

Remote Preview Pod The suspect hard drive, or a clone disk created from the image of the suspect hard drive, may be directly accessed in read-only mode for file preview or detailed investigation. This remote preview hardware is available separately or as part of a high performance imaging system.

The range of computer forensic hardware and software is under continual development to keep pace with changes in computer technology and requirements of computer forensics. Please contact Vogon directly if you have any requirements that do not appear to be covered by the products listed here.

Listed below are the the main legacy Imager products. Click on the link for product details and a downloadable datasheet.

Dual DAT Imager
For fast imaging of suspect hard disks to DAT media. Two images may be recorded simultaneously.

Diskette Imager
For imaging larger quantities of diskettes with minimal operator intervention

Listed below are the individual Imaging Systems. Click on the link for product details and a downloadable datasheet.

Windows based high performance imaging systems based on a mobile or laboratory workstation PC. This product range includes:
Laboratory Based Imaging System
A state of the art imaging system. Suspect or target disk drives can be imaged at approaching bus speeds in an evidentially secure manner. Provides a comprehensive range of anti-repudiation and auditing features. DAT and LTO variants are available.

Mobile Imaging System
A state of the art imaging system based on a portable PC. Suspect or target disk drives can be imaged at approaching bus speeds in an evidentially secure manner. Provides a comprehensive range of anti-repudiation and auditing features. DAT and LTO variants are available.

Enterprise Imaging System
This leading edge UNIX based system that wide scale imaging at the corporate level. Configuration can be tailored to suit individual requirements.

Listed below are the individual Forensic Workstations. Click on the link for product details and a downloadable datasheet.

Laboratory Based Forensic Workstation
A state of the art imaging system and full processing and investigation facilities. Suspect or target disk drives can be imaged at approaching bus speeds in an evidentially secure manner. Provides a comprehensive range of anti-repudiation and auditing features. DAT and LTO variants are available.

Mobile Forensic Workstation
A state of the art imaging system and full processing and investigation facilities based on a portable PC provide the power and capability of a dedicated forensic laboratory to virtually anywhere in the world. Suspect or target disk drives can be imaged at approaching bus speeds in an evidentially secure manner. Provides a comprehensive range of anti-repudiation and auditing features. DAT and LTO variants are available.

Forensic Processing Station
The Processing Station together with an Enterprise Imaging System support the widest range of computer investigation requirements. Automated image media handling is a special feature of the Processing Station.

Listed below are the individual emulation and remote preview products. Click on the link for product details and a downloadable datasheet.

Disk Emulators
Currently available in two versions:

  • LTO Disk Emulator for use with images recorded by the highest performance (LTO) versions of the Imaging System and Forensic Workstation.

  • DAT Disk Emulator for use with images recorded by the DAT Imager, and lower cost (DAT) versions of the Imaging System and Forensic Workstation.

Vogon Remote Preview and Imaging Pod
To allow viewing of the file system of a suspect or clone hard drive in a safe and evidentially secure manner.

UK +44 (0) 1869 355255
Freephone 0800 581263
investigate@vogon.co.uk USA +1 405 321 2585
Toll Free 1-800 392-5373
investigate@vogon.us
München +49 (0) 89 3235030
Köln +49 (0) 2203 91547 400
Freecall 00800 42424200
investigate@vogon.de Norway +47 2337 1400
Freecall 00800 42004242
etterforskning@vogon.no

Copyright Vogon International. All rights reserved.  
Home Page | Investigation Services | Laboratory Services | Forensic Systems