The imaging software has been developed by Vogon over the past decade to offer very high imaging performance together with comprehensive auditing and anti-repudiation techniques. This imaging process is independent of the file system(s) on the hard drive under investigation, and is recognised by courts around the world as the only valid means of capturing computer evidence.

A full suite of forensic software tools is supplied to permit processing and investigation of data held within an image. The Software page covers the features of these software tools. Additional Disk Emulator hardware is available to automatically produce a clone disk for investigation purposes.

Features of the Mobile Forensic Workstation

• Compact and transportable: Full imaging, processing and investigation facilities can be provided at remote locations.

• Preview capability: Data files can be accessed with complete confidence that the data on the hard drive will not be changed.

• Automatic write protection: Specialised hardware ensures that there is absolutely no risk of accidentally writing to the hard drive under investigation.

• Password cracking pod: To access data from most password protected 'laptop' hard drives without knowledge of password.

• Unlimited theoretical capacity: Images can span multiple tapes. Each LTO Ultrium tape typically holds between 100 and 200GB of data depending on compression ratio.

• Choice of LTO Ultrium or DAT drives: LTO Ultrium drives provide the highest image recording performance. DAT drives may be specified as a lower cost alternative.

• Optional second tape drive: To produce "evidential" and "working" images simultaneously.

• Hard drive connectivity: Any hard drive with an ATA or SCSI interface can be attached.

• Convenience: A two metre flexible cable connects to a remote pod that in turn connects to the hard drive under investigation. This allows most hard drives to be connected without the need to remove them from the computer under investigation.

• High performance: 32-bit imaging software provides state of the art imaging performance.

• Progress and status reporting: The software provides an on-screen progress display and a printable status report is generated for audit purposes.

• Real-time reporting: A display panel on the bus expansion module provides instantaneous data capture rate information.

• Anti-repudiation facility: CRC32 and MD5 checksums generated during the imaging process allow the image to be validated at any time.

• Safety: A protected power supply provides power to the hard drive. The computer under investigation does not need to be powered.

• Flexibility: Hard drives may be disconnected and connected without the need to reboot the Imaging System.

• Processing and Investigation Software: The full range of Vogon Processing and Investigation Software tools are included as standard. Features of the software tools are described in a separate datasheet.

• Technical Support: A dedicated support team at Vogon will provide email and/or telephone support to ensure any technical issues are handled promptly and effectively.

• Training: Full training on the use of Vogon products is available at Vogon's training centres in UK and Germany, or may be arranged at client's training facility.

If you do not have Adobe Acrobat it may be downloaded from Adobe's website here.