Menu

WiebeTech Digital Forensics

wiebetech

 

Digital Forensic Field Station

The hand-held Ditto Forensic FieldStation travels with you or a technician for use in creating local, remote, or networked disk clones and images, including logical imaging of user-selectable lists of files and folders. Configure and manage via network or on the unit itself. The Ditto FieldStation also helps you log user activity and maintain your chain of custody while using forensic (write-blocked) methods.

An easy-to-use web browser interface supports remote operation via network or VPN, providing access to Ditto configuration, user administration and user rights, as well as direct operation of Ditto cloning and imaging operations. This time- and money-saving capability speeds time to data capture, as well as allows organizations to optimize staffing and deployment.

Product Code: AP-DITTO-FSTN

 

thumbnail

Ditto SAS Expansion Module

Product Code: AP-DITTO-SAS

Extend the functionality of your Ditto® Forensic FieldStation by adding a SAS Expansion Module to your available Source Inputs.
Connects in seconds
No software configuration is necessary after attaching the expansion module onto Ditto® Forensic FieldStation.
Drives Supported:
SATA 2.5″ Drives
SATA 3.5″ Drives
SAS 2.5″ Drives
SAS 3.5″ Drives

thumbnail

Ditto USB Expansion Module

Product Code: AP-DITTO-USB

Upgrades Ditto Forensic Fieldstations
Extend the functionality of your Ditto® Forensic FieldStation by adding a write-blocked USB 3.0 to your available Source Inputs.
Connects in seconds
No software configuration is necessary after attaching the expansion module onto Ditto® Forensic FieldStation.
Drive Types Supported:
USB Thumb Drives
USB drives via USB cablethumbnail

Ditto FireWire Expansion Module

Product Code: AP-DITTO-FW

Extend the functionality of your Ditto Forensic FieldStation by adding write-blocked FireWire to your available source inputs.
Connects in seconds
No software configuration is necessary after attaching the expansion module.
Drive Types Supported:
FireWire drives via FireWire cable

thumbnail

Forensic LabDock U5

Product Code: AP-CRU-U5

Forensics investigators, technicians, and system builders who want to create a digital forensic workstation rely upon the CRU® WiebeTech® Forensic LabDock™ U5. Installed in a standard 5.25″ PC bay, the Forensic LabDock U5 gives convenient, front-panel access to suspect hard drives and thumb drives. Write-blocking is done in hardware, with proven WiebeTech write-blocking technology.

In addition to providing native write-blocked access to SATA and IDE drives, the Forensic LabDock U5 model also incorporates a USB WriteBlocker, so you can forensically access USB thumb drives or many USB drive enclosures.

 

thumbnail

 

 

Forensic UltraDock FUDv5.5

Product Code: AP-CRU-FUDV5.5

Digital and forensics investigators, technicians, and lawyers who want to view, evaluate, or image a disk drive safely rely upon the CRU® WiebeTech® Forensic UltraDock™. It’s an easy-to-use, professional-grade drive dock that provides multiple host and drive connection types.

To use, connect a suspect hard drive–IDE or SATA–to the Forensic UltraDock, plug in power, and attach a cable to the host computer. The drive connector enables automatic alignment and easy insertion. The Forensic UltraDock’s LED indicator light and easy screen menu also clearly identify the work mode.

The Forensic UltraDock detects and indicates hidden areas of the drive (HPA and/or DCO) automatically, and allows you to choose on-the-fly whether or not to temporarily or permanently unhide them. The LCD menu makes such selection easy–no complicated DIP switches to set.

The Forensic UltraDock’s LCD puts drive information at your fingertips. Quickly access selected important SMART data such as hours used, number of power cycles, and disk health. It can also display the model and serial number reported by the drive’s firmware.

The Forensic UltraDock model FUDv5.5 has USB 3.0, USB 2.0, eSATA, and FireWire 800 host connections. It natively supports the most common types of drives, such as SATA and IDE/PATA, but if you need to work with a non-standard drive, there are a variety of adapters available for additional flexibility. thumbnail

 

Forensic ComboDock FCDv5.5

Product Code: AP-CRU-FCDv5.5

Digital and forensics investigators, technicians, and lawyers who want to view, evaluate, or image a drive safely rely upon the CRU® WiebeTech® Forensic ComboDock™. It’s an easy-to-use, professional-grade, dual mode dock that provides a plethora of host and drive connections.

To use, connect a suspect hard drive to the Forensic ComboDock, plug in power, and attach to your computer. The drive connector enables automatic alignment and easy insertion.

When turned on, the Forensic ComboDock asks you to choose either write-blocking or read/write mode. If you need to modify contents of a suspect drive, switch the Forensic ComboDock into temporary read/write mode.

Even though switching from write blocker mode to read/write mode is easy, the Forensic ComboDock v5 makes it impossible to unintentionally turn off write-blocking. This prevents problems that can occur if you forget to change the mode back to write-blocking.

The Forensic ComboDock’s LED indicator and easy screen menu also clearly identify the operating mode. You can even detect, remove, or modify Host Protected Areas (HPAs) and Device Configuration Overlays (DCOs) that may be hiding additional data on the suspect drive.

The Forensic ComboDock puts drive information at your fingertips. Quickly access selected important SMART data such as hours used, number of power cycles, and disk health. It can also display the model and serial number reported by the drive’s firmware. Free downloadable software can also allow you to view this information on your computer and save it to a file for easy inclusion in a case report.

The Forensic ComboDock model FUDv5.5 has USB 3.0, USB 2.0, eSATA, and FireWire 800 connections, and works natively with the most common types of hard drives such as IDE/PATA and SATA. But if you need to work with a non-standard drive there are a variety of adapters available for additional flexibility.thumbnail

USB 3.0 WriteBlocker

Product Code: AP-CRU-USB3.0

Digital forensics investigators, lawyers, and corporate IT staff who want to view, examine, and image drives quickly and easily, look to the CRU® WiebeTech® USB 3.0 WriteBlocker™ to ensure they are protecting and not altering data.

The handheld and lightweight USB 3.0 WriteBlocker connects over USB 3 to allow investigators and technicians to look through the contents of a drive without risking any damage or disruption of source data. To use, simply use the included USB 3.0 cable to connect the USB 3.0 WriteBlocker to the drive or drives you wish to inspect.

The WiebeTech WriteBlocking Validation Utility, our complimentary Windows application, tests the reliability of any write blocker available, hardware or software.thumbnail

 

Drive eRazer Ultra

Product Code: AP-CRU-ERAZER

Before selling or disposing of an old computer or hard drives, you’ll want to make sure personal and business information is really removed from them first.

Completely erasing a hard drive is more complex than deleting a file or reformatting the drive. To safely sanitize your drive, you need to completely write over every bit. Otherwise, your sensitive data is there for the taking.

No computer needed

The CRU® WiebeTech® Drive eRazer™ Ultra is a stand-alone device that completely and quickly cleans hard drives. Simply connect a drive to the Drive eRazer Ultra and it will sanitize the drive faster than using software, and without tying up your computer.

The Drive eRazer Ultra leaves the drive ready for safe re-use, and comes with a dozen different preset erase procedures, including US Department of Defense graded methods for data wiping.

Whether you’re an IT manager or business owner, and you want your sensitive information sanitized from a drive, the Drive eRazer Ultra is the perfect tool. thumbnail

Request A Quote