Digital investigation, eDiscovery, forensic data acquisition
Next-generation imaging !
The Ditto® DX Forensic FieldStation is the latest addition to the Ditto Forensic FieldStation family, with the same great usability features as the original Ditto device.
Ditto DX performance has been optimized for various forms of media, including SSDs, NVMe/PCIe, hard drives, SD and CF cards, and others.
Time-saving Logical Imaging
With hard drives and networked file shares exploding in size, Logical Imaging is more important than ever. Ditto DX Logical Imaging performance is twice that of the Ditto device. And with automatic, pre-selected search and acquire capability, Ditto DX slashes the time it takes to capture needed evidence.
An easy-to-use web browser interface supports remote operation via network or VPN, providing access to Ditto configuration, user administration and user rights, as well as direct operation of Ditto cloning and imaging operations. Ditto DX improves on Ditto with separate Ethernet and USB 2.0 ports so Ditto DX can be managed without impacting imaging performance.
Create logical and physical images in the field
The built-in menu system makes it easy to configure and perform forensic captures of selected files–without an attached computer. Generate complete listings of drive or file system contents to facilitate discovery, or automatically capture specific file types.
Suspect Inputs (write-blocked)
Ditto natively supports many write-blocked inputs: SATA, eSATA, PATA, USB3.0/2.0. Additional acquisition interfaces are available via expansion modules, such as the Ditto SAS Expansion Module and Ditto FireWire Expansion Module.
Use dual SATA outputs simultaneously with same performance as one eSATA (single, dual and mirrored). Images can also be output to large volumes, including NAS and other network destinations, as well as portable RAID enclosures.
Data Acquisition Modes
Clone, DD, E01, L01 with MD5 or SHA-1 hashing. Ditto DX also offers a combined mode that captures a clone and DD (to different destination drives) in a single pass reading of the suspect drive.
Complete and Secure Erasure
Ditto DX is capable of sanitizing drives with preset erase modes or a user configurable pattern.
Water-resistant, dust-proof Pelican® custom carrying case available
Convenient, customized field kits are available for Ditto and accessories.
|Product name||Ditto DX Forensic FieldStation|
|Host (I/O) Ports||(1) IDE/PATA -- source side
(2) USB 2.0 -- for peripheral attachment
(3) USB 3.0 -- one source, two destination -- up to 5 Gbps
(3) eSATA -- one source, two destination -- up to 6 Gbps
(3) Gigabit (1000Base-T) Ethernet -- one source, one destination, one GUI access
Drive Types Supported
|Supports S.M.A.R.T. disk info||Yes|
|Number of LEDs||15|
|Description of LEDs||LED for each data connection (lit when connected) plus a light bar showing operating status|
|LCD Screen||Four-line backlit LCD controlled with four soft-touch menu navigation buttons. Browser-based Ditto interface allows for direct operation, remote operation, and administration.|
|LCD Info||4 lines x 20 characters width|
|Stealth Mode||Disables all light output (LEDs/LCD). LCD readable with night-vision goggles.|
|Navigation menu||LCD/button driven menu system|
|Web admin interface||Operable from a web browser|
|Operating system compatibility||Windows XP or later
Mac OS X 10.4.x or higher
Most versions of Linux
|Browser compatibility||Internet Explorer
|Allows HPA/DCO override||Temporarily or permanently remove HPA/DCO|
|Construction material(s)||All-aluminum construction|
|Ambient humidity range||5% to 95%, non-condensing|
|Power switch||2 position: On / Off|
|Power input||60W 12V 5A DC|
|Power input connector||Barrel connector (center pin positive)|
|Dimensions||4.92" x 6.77" x 1.72" (125mm x 172mm x 43.7mm)|
|Weight||5.00 lbs. (2.27 kg)|
|Write Blocking||Yes (source side)|
|Write Blocked ports||eSATA (SATA), PATA/IDE, USB 3.0; other input types and drive types supported with Ditto Expansion Modules or drive adapters|
|Hashing info||None, MD5, SHA-1, SHA-256, MD5 + SHA-1, MD5 + SHA-256. Hash types are hardware-accelerated; can hash during image or clone.|
|Erase modes||Clear Partition Table, Quick Erase, Custom Erase, Secure Erase Normal, Secure Erase Enhanced, DoD Clear, DoD Sanitize, NIST800-88 Clear, NIST800-88 Purge|
|Image/clone output modes||Single Drive Image, Single Drive Clone, Image and Clone, Image to mirrored disks, Clone to mirrored disks|
|Compliancy||FCC, CE, RoHS, RCM|
|Warranty||CRU provides a 3-year limited warranty for this product.|
Drive Types Supported