The Forensic Dossier now features
E01 hardware-based compression!






Forensic Dossier®


For more information and to request a product catalog click here

The sixth generation of computer forensic solutions from Logicube, the Forensic Dossier® was designed and engineered exclusively to meet forensic investigators' requirements.  

Update: The Dossier now supports a user-selectable menu in Chinese language (both Traditional and Simplified) effective with software relase v2.21RC02

 Image multiple suspect drives quickly and efficiently in the field or in the lab with the multi-source, multi-target Forensic Dossier.

  • Use the Dossier as a write-blocker for drive preview and imaging – no requirement for additional write-block hardware and previewing suspect drives can save valuable image processing time on-scene
  • The Dossier features built-in support for IDE and SATA drives and provides a broad selection of drive adapters to ensure you have support for any drive interface you encounter in an investigation
  • Industry-proven ATA security feature provides maximum protection to evidence drives during transportation from field to lab and inter-office
  • Dossier can be used with Self-Encrypting drives. Self-Encrypting drives provide hardware-based encryption – delivering an extremely secure, cost-effective method of protecting evidence drives from unauthorized access. More secure than software-based encryption without the performance degradation or complex set-up and configuration
  • Limited timelines are the norm and accuracy is critical to any forensic investigation. The Dossier can capture at transfer speeds over 7GB/min and uses MD5 and SHA-256 authentication concurrently to ensure that evidence data is captured and available for analysis as quickly as possible
  • Rugged and dependable the Dossier is used by military, legal firms and law enforcement organizations around the world
  • Use the Forensic Dossier for data collection for eDiscovery, compliance, internal and regulatory investigations
  • Fast network connectivity for forensic data transfer to network locations using the Dossier and NETConnect
  • Capture and store up to 8TB of data using  MPFS
  • Capture a snapshot of a suspect PC's volatile memory  using the Dossier with NETConnect's Live Acquisition feature. Capture IP addresses, passwords and other data not typically stored on the hard drive
  • The Dossier is easy to use – even for first responders! No requirement for expensive training programs

 

Click here to see recent user testimonials about the Dossier.  

     

     

     

     

     

For more information or to purchase please
contact Logicube now!

Click here for product support Download PDF Datasheet
 
Features Software Optional Hardware Specifications
Capture Two Hard Drives
The Dossier captures data from one or two suspect hard drives to one or two evidence drives.
Dossier Connectivity Options
The Dossier provides built-in support for SATA and IDE drives and includes built-in connectivity for firewire and USB
Capture and Authenticate

Capture and authenticate at speeds over 7GB/min (speeds will vary depending on type and size of drives).

E01 Evidence File Format and Compression Support (optional)

The E01 file format support (optional on the Forensic Dossier) allows users to capture hard disk drive data directly into the E01 format.  Supports Encase® v6.x and FTK® v3.x and above. Features hardware-based compression to maintain line-speed performance and MD5 hash authentication.

Support for SCSI and SAS Drives (optional)

SCSI and SAS drives are supported with optional adapters 

MD5 and SHA-256 Authentication

Uses the highest level of authentication computing MD5 and SHA-256 hash concurrently in real time at full capturing speed

Built-in Support for RAID drive Pair
The Dossier features built-in support for capture from a RAID drive pair; 0, 1, JBOD
NTFS File Format

NTFS file format for support of 2TB and greater capacity hard drives and for support of single, disk-wide dd image capture; capture a full disk with a single segment file.

Drive Spanning

Capture from one large suspect drive to two smaller evidence drives

Advanced Keyword Search
Search for hundreds of words while capturing at full speed. Store multiple groups of pre-defined keyword lists on compact flash. Retrieve search results directly to Windows. Search for suspect names, phone numbers, and any other incriminating information. Add new words while in the field, using the built-in keypad.

Compatible With Self-Encrypting Drives

Can be used with Self-Encrypting hard disk drives. Using hardware-based encryption, (encryption resides on the disk drive subsystem) provides a more secure method of encryption. Using the ATA security command feature,  users can set password and lock evidence drives. 

Capture From Flash Media
The Dossier features a built-in media reader that provides the ability to capture from a variety of flash media devices including compact flash, memory sticks, SD and multi-media cards
100% Write Protection

Provides 100% write-protection (source drives) - providing the ability to use as an external write-blocker for easy drive preview/image transfer without additional write-block hardware

Audit Trail Reporting
Generate and write to compact flash for review and printing
Unidirectional Data Transfer
Copies only from the external data source to prevent inadvertent over-writing or corruption of a suspect's drive. This ensures that the captured image will meet the requirements of law enforcement, corporate security, and cyber crime investigation and prosecution.
Propietary O/S

Virus vulnerability is virtually eliminated with Logicube's propietary operating system.

Security System

Features a password-based security system (based on the ATA security specification T13) to protect evidence drives from unauthorized access. Two security levels, High or Maximum, are featured and users can set a Master along with a User password.

eSATA and microSATA Drives (optional)
Supports eSATA and microSATA drives with optional cables
Unique Slide-In Design

Evidence or Destination drives are fully protected and secured inside the Dossier with a unique slide-in design

Capture via USB or FireWire
Capture directly from a desktop/laptop and from MAC computers (via PC interface) with the Forensic USB/FireWire Cloning Software. Software CD-ROM is included with the Forensic Talon or Forensic Dossier data capture solution.
Dossier Erase Options
The Dossier can perform a standard WipeClean, a DoD wipe or a high-speed Security Erase (if drive model supports) of a single destination drive or both destination drives simultaneously.
Solid State Drives

Supports solid state drives

Extended Life Rechargeable Battery (optional)

The extended life rechargeable battery provides 3 hours of extended use for the Forensic Dossier . This battery is used to power the Forensic Dossier whenever connection to a standard AC outlet is either undesirable or not possible. Part number F-BATTERY-EXTND.

Internal Flash Memory
An internal flash memory stores keyword lists, software updates, reports and more. The flash memory is accessible via USB or firewire connection
High-Speed USB Drive Acquisition (optional)

Optional support for USB 2.0 acquisition speeds ( up to 1.5GB/min) of USB enclsoures, USB thumb/flash drives. Requires the purchase of a software key code to activate software and either the SCSI or SAS adapter for USB plug-in.

Compatible With The MPFS

The Forensic Dossier is compatible with the Logicube MPFS (Massive Portable Forensic Storage) solution. The MPFS provides up to 8TB of storage capacity.

Optional Adapters (optional)
1.8", 2.5" and ZIF drive adapters are available
Save Configuration Setting

Includes a Save Configuration Setting that allows the operator to save frequent used capture settings. Settings will be saved from last capture session.

Networking Option

The Forensic Dossier is compatible with the NETConnect™ networking module. Connect the Dossier tray to the NETConnect for immediate network connectivity. Preview or transfer data directly from Dossier via a gigabit ethernet interface to network locations using NETConnect.

Unique Design Eliminates Drive Heat Build-up

The Dossier's unique design has been engineered specifically to eliminate drive heat build-up.

One-year Standard Warranty
The system comes complete with a one year parts and labor warranty. Both an optional 1 year extended warranty ( total of 2 years) and a 2 year extended warranty (total of 3 years) are available.
Forensic Dossier Contents

The Forensic Dossier is available as a standalone or as a kit. Both are packed in a  carrying case

Standalone Version
Includes power supply, two 5" and 9" data and power cables, SATA, firewire and USB cables, a compact flash card, screwdriver, flashlight, a CD-ROM with Dossier software and a users manual

Dossier Kit Version
IPacked in a rugged, hard-sided carrying case, the kit includes a power supply, two each of 5", 9" and 18" data and power cables (both UDMA and SATA), SATA, firewire and mini USB cables, eSATA and microSATA cables, E01 file format software option, a compact flash card, CloneCard PRO PCMCIA adapter, 2.5", 1.8" and ZIF adapters, screwdriver, flashlight, a CD-ROM with Dossier software and a users manual

HPA And DCO Capture
Detect and capture Host Protected Areas (HPA) and Device Configuration Overlay (DCO) hidden areas on the source (suspect) drive.
Integrated Keypad

A fully integrated QWERTY alphanumeric keypad is featured for easy entry of file names, user credentials, keyword searches, passwords and other data entry functions.

4K Sector Drives

Compatible with 4K Sector Advanced Format Hard Disk Drives

Bundled Configurations Offered

The Forensic Dossier is available as part of a bundled solution with the MPFS and/or NETConnect. Contact our sales team today for information and pricing.







Markets - Support - Sales - Company Profile - Legal
Logicube Forensics Sitemap - Contact