The hand-held Ditto Forensic FieldStation travels with you or a technician for use in creating local, remote, or networked disk clones and images, including logical imaging of user-selectable lists of files and folders. Configure and manage via network or on the unit itself. The Ditto FieldStation also helps you log user activity and maintain your chain of custody while using forensic (write-blocked) methods.
An easy-to-use web browser interface supports remote operation via network or VPN, providing access to Ditto configuration, user administration and user rights, as well as direct operation of Ditto cloning and imaging operations. This time- and money-saving capability speeds time to data capture, as well as allows organizations to optimize staffing and deployment.
The built-in menu system makes it easy to configure and perform forensic captures of selected files–without an attached computer. Generate complete listings of drive or file system contents to facilitate discovery.
Ditto natively supports many write-blocked inputs: SATA, eSATA, PATA, USB2.0. Additional acquisition interfaces are available via expansion modules, such as the Ditto USB 3.0 Expansion Module and Ditto SAS Expansion Module or Ditto Firewire Expansion Module.
Use dual SATA outputs simultaneously with same performance as one eSATA (single, dual and mirrored). Images can also be output to large volumes, including NAS and other network destinations, as well as portable RAID enclosures.
Data Acquisition Modes
Clone, DD, E01, L01 with MD5 or SHA-1 hashing. Ditto also offers a combined mode that captures a clone and DD (to different destination drives) in a single pass reading of the suspect drive.
Ditto is capable of sanitizing drives with preset erase modes or a user configurable pattern.
Convenient, customized field kits are available for Ditto and accessories.
|Product name||Ditto Forensic FieldStation|
|Host (I/O) Ports||(1) IDE/PATA -- source side
(1) USB 2.0
(3) eSATA -- one source, two destination -- up to 3 Gbps
(2) Gigabit (1000Base-T) Ethernet -- one source, one destination/GUI access
|Drive Types Supported||
|Supports S.M.A.R.T. disk info||Yes|
|Number of LEDs||10|
|Description of LEDs||Power in 5V/12V, USB, Source Network, IDE, eSATA, Expansion, HPA/DCO, Destination Network, eSATA A, eSATA B|
|LCD Screen||Four-line backlit LCD controlled with four soft-touch menu navigation buttons. Browser-based Ditto interface allows for direct operation, remote operation, and administration.|
|LCD Info||4 lines x 24 characters width|
|Stealth Mode||Disables all light output (LEDs/LCD). LCD readable with night-vision goggles.|
|Navigation menu||LCD/button driven menu system|
|Web admin interface||Operable from a web browser|
|Operating system compatibility||Windows XP or later
Mac OS X 10.4.x or higher
Most versions of Linux
|Browser compatibility||Internet Explorer
|Allows HPA/DCO override||Temporarily or permanently remove HPA/DCO|
|Construction material(s)||All-aluminum construction|
|Ambient humidity range||5% to 95%, non-condensing|
|Power switch||2 position: On / Off|
|Power input||40W 12V 3.33A DC|
|Power input connector||Barrel connector (center pin positive)|
|SATA Power Input||Yes|
|Molex Power Input||Yes|
|Dimensions||4.92" x 6.77" x 1.72" (125mm x 172mm x 43.7mm)|
|Weight||5.00 lbs. (2.27 kg)|
|Write Blocking||Yes (source side)|
|Write Blocked ports||eSATA (SATA), PATA/IDE, USB 2.0; other input types and drive types supported with Ditto Expansion Modules or drive adapters|
|Hashing info||None, MD5, SHA-1, MD5 + SHA-1. Hash types are hardware-accelerated; can hash during image or clone.|
|Erase modes||Clear Partition Table, Quick Erase, Custom Erase, Secure Erase Normal, Secure Erase Enhanced, DoD Clear, DoD Sanitize, NIST800-88 Clear, NIST800-88 Purge|
|Image/clone output modes||Single Drive Image, Single Drive Clone, Image and Clone, Image to mirrored disks, Clone to mirrored disks|
|Compliancy||FCC, CE, RoHS, C-Tick, RCM|
|Warranty||CRU provides a 3-year limited warranty for this product.|