Wiebetech Ditto Forensic FieldStation

Wiebetech Ditto Forensic FieldStation

Digital investigation, eDiscovery, data capture and analysis

    • Corporate security, law enforcement, military applications
    • Discover, preview, and image files from hard drives and network file systems
    • Physical Imaging of complete hard drives
    • Logical Imaging of selected files from hard drives and network file systems
    • Fully networked remote operation
    • Free feature upgrades (Download the latest Ditto® firmware.)
    • Rugged, all-metal, silent fan-free construction
    • Free 3-year warranty and no annual fees

 

Overview

Ditto Forensic FieldStation

NOTE: The CRU WiebeTech Ditto® Forensic FieldStation and its browser-based interface have been fully analyzed and verified to not be susceptible to either the Heartbleed bug or the Shellshock security hole.

Stay home, send Ditto: Save time and money.

The hand-held Ditto Forensic FieldStation travels with you or a technician for use in creating local, remote, or networked disk clones and images, including logical imaging of user-selectable lists of files and folders. Configure and manage via network or on the unit itself. The Ditto FieldStation also helps you log user activity and maintain your chain of custody while using forensic (write-blocked) methods.

Flexibility and speed via browser-based interface

An easy-to-use web browser interface supports remote operation via network or VPN, providing access to Ditto configuration, user administration and user rights, as well as direct operation of Ditto cloning and imaging operations. This time- and money-saving capability speeds time to data capture, as well as allows organizations to optimize staffing and deployment.

Create logical and physical images in the field

The built-in menu system makes it easy to configure and perform forensic captures of selected files–without an attached computer. Generate complete listings of drive or file system contents to facilitate discovery.

Suspect Inputs (write-blocked)

Ditto natively supports many write-blocked inputs: SATA, eSATA, PATA, USB2.0. Additional acquisition interfaces are available via expansion modules, such as the Ditto USB 3.0 Expansion Module and Ditto SAS Expansion Module.

Destination Outputs

Use dual SATA outputs simultaneously with same performance as one eSATA (single, dual and mirrored). Images can also be output to large volumes, including NAS and other network destinations, as well as portable RAID enclosures.

Data Acquisition Modes

Clone, DD, E01, L01 with MD5 or SHA-1 hashing. Ditto also offers a combined mode that captures a clone and DD (to different destination drives) in a single pass reading of the suspect drive.

Complete and Secure Erasure

Ditto is capable of sanitizing drives with preset erase modes or a user configurable pattern.

Water-resistant, dust-proof Pelican® custom carrying case available

Convenient, customized field kits are available for Ditto and accessories.

ModelCase TypeDescription
Ditto Field Kit "D" Pelican 1450 This compact, rugged case features custom foam with slots for one Ditto, four expansion modules, plus accessories, with a little room left over for adding additional tools of your choice
Ditto Field Kit "K" Pelican 1510 Also known as "Quad Ditto Carrying Case," this rolling, dust-proof, water-resistant case features custom foam with slots for up to 4 Dittos, expansion modules, write-blockers, and accessories
Ditto Field Kit "L" Soft side zipper case This highly-portable kit includes slots for a Ditto, up to two pocket drives for target storage, a CD/DVD reader, accessories, and a Media WriteBlocker

Utvalda videos: