The Forensic Dossier features support
for E01 Evidence File Format!

Forensic Dossier®


Hard drives and flash media devices contain valuable digital data that can help forensic investigators build a criminal case.

The Forensic Dossier® represents the sixth generation of computer forensic solutions from Logicube. This high-speed solution captures and authenticates at speeds over 7GB/min! The Dossier can capture data from one or two suspect drives to either one or two evidence drives simultaneously.

This sophisticated but easy to use solution features built-in support for capture from SATA/IDE hard drives, flash media and RAID Pairs, optional support for both SCSI and SAS hard drives, built-in USB and firewire connectivity, and provides the highest level of authentication with MD5 and SHA-256 hash computed concurrently.

The Dossier features support for the E01 Evidence File Format. This option (included with our kit version of Dossier) allows you to capture directly into the E01 file format. The E01 format is compatible with both Encase® v6.x and Forensic Tool Kit® (FTK) v3.x.

The Dossier works seamlessly with Logicube's MPFS ( Massive Portable Forensic Storage) that allows users to capture up to 8TB of data. Use Logicube's NETConnect to preview or transfer digital data from Dossier or MPFS post-capture to a network. NETConnect can be configured as a NAS (Network Attached Storage) or as a "client" for a network file system. The Dossier combined with MPFS and NETConnect work together to create a Total Forensic Solution that meets the challenges of digital forensic investigations.

 

 

 

 

 

Click here for product support Download PDF Datasheet
 
Features Software Optional Hardware Specifications
Capture Two Hard Drives
The Dossier captures data from one or two suspect hard drives to one or two evidence drives.
Dossier Connectivity Options
The Dossier provides built-in support for SATA and IDE drives and includes built-in connectivity for firewire and USB
Capture and Authenticate

The Forensic Dossier will capture and authenticate at speeds over 7GB/min (speeds will vary depending on type and size of drives).

E01 Evidence File Format Support (optional)

The E01 software option allows users to capture hard disk drive data directly into the E01 format. This forensically sound acquisition uses MD5 & CRC authentication and evidence or destination drive data can then be easily uploaded to the forensic analysis software in a ready-to-analyze state.  Supports Encase® v6.x and FTK® v3.x and above. The E01 file format option will support hardware-based compression through a future firmware upgrade.

Support for SCSI and SAS Drives (optional)

SCSI and SAS drives are supported with optional adapters 

MD5 and SHA-256 Authentication
The Dossier uses the highest level of authentication computing MD5 and SHA-256 hash concurrently in real time at full capturing speed
Built-in Support for RAID drive Pair
The Dossier features built-in support for capture from a RAID drive pair; 0, 1, JBOD
Capture From Flash Media
The Dossier features a built-in media reader that provides the ability to capture from a variety of flash media devices including compact flash, memory sticks, SD and multi-media cards
Drive Spanning
The Dossier allows a user to capture from one large suspect drive to two smaller evidence drives
Advanced Keyword Search
Search for hundreds of words while capturing at full speed. Store multiple groups of pre-defined keyword lists on compact flash. Retrieve search results directly to Windows. Search for suspect names, phone numbers, and any other incriminating information. Add new words while in the field, using the built-in keypad.

HPA And DCO Capture
Detect and capture Host Protected Areas (HPA) and Device Configuration Overlay (DCO) hidden areas on the source (suspect) drive.
Integrated Keypad

A fully integrated QWERTY alphanumeric keypad is featured for easy entry of file names, user credentials, keyword searches, passwords and other data entry functions.

Internal Flash Memory
An internal flash memory stores keyword lists, software updates, reports and more. The flash memory is accessible via USB or firewire connection
Audit Trail Reporting
Generate and write to compact flash for review and printing
Unidirectional Data Transfer
Copies only from the external data source to prevent inadvertent over-writing or corruption of a suspect's drive. This ensures that the captured image will meet the requirements of law enforcement, corporate security, and cyber crime investigation and prosecution.
Propietary O/S

Virus vulnerability is virtually eliminated with the Dossier's propietary operating system.

Security System
The Dossier features a password-based security system (based on the ATA security specification T13) to protect evidence drives from unauthorized access. Two security levels, High or Maximum, are featured and users can set a Master along with a User password.
eSATA and microSATA Drives (optional)
Supports eSATA and microSATA drives with optional cables
Unique Slide-In Design

Evidence or Destination drives are fully protected and secured inside the Dossier with a unique slide-in design

Capture via USB or FireWire
Capture directly from a desktop/laptop and from MAC computers (via PC interface) with the Forensic USB/FireWire Cloning Software. Software CD-ROM is included with the Forensic Talon or Forensic Dossier data capture solution.
Dossier Erase Options
The Dossier can perform a standard WipeClean, a DoD wipe or a high-speed Security Erase (if drive model supports) of a single destination drive or both destination drives simultaneously.
Solid State Drives
Supports most solid state drives
Extended Life Rechargeable Battery (optional)

The extended life rechargeable battery provides 3 hours of extended use for the Forensic Dossier. This battery is used to power the Forensic Dossier whenever connection to a standard AC outlet is either undesirable or not possible. Part number F-BATTERY-EXTND.

100% Write Protection

The Forensic Dossier provides 100% write-protection (source drives) - providing the ability to use the Dossier as an external write-blocker for easy drive preview/image transfer

High-Speed USB Drive Acquisition (optional)

Optional support for USB 2.0 acquisition speeds ( up to 1.5GB/min) of USB enclsoures, USB thumb/flash drives. Requires the purchase of a software key code to activate software and either the SCSI or SAS adapter for USB plug-in.

Compatible With The MPFS

The Forensic Dossier is compatible with the Logicube MPFS (Massive Portable Forensic Storage) solution. The MPFS provides up to 8TB of storage capacity.

Optional Adapters (optional)
1.8", 2.5" and ZIF drive adapters are available
Save Configuration Setting

The Forensic Quest2 and the Forensic Dossier include a Save Configuration Setting that allows the operator to save frequent used capture settings. Settings will be saved from last capture session.

Networking Option

The Forensic Dossier is compatible with the NETConnect™ networking module. Connect the Dossier tray to the NETConnect for immediate network connectivity. Preview or transfer data directly from Dossier via a gigabit ethernet interface to network locations using NETConnect.

Unique Design Eliminates Drive Heat Build-up

The Dossier's unique design has been engineered specifically to eliminate drive heat build-up.

One-year Standard Warranty
The system comes complete with a one year parts and labor warranty. Both an optional 1 year extended warranty ( total of 2 years) and a 2 year extended warranty (total of 3 years) are available.
Forensic Dossier Contents

The Forensic Dossier is available as a standalone or as a kit. Both are packed in a  carrying case

Standalone Version
Includes power supply, two 5" and 9" data and power cables, SATA, firewire and USB cables, a compact flash card, screwdriver, flashlight, a CD-ROM with Dossier software and a users manual

Dossier Kit Version
IPacked in a rugged, hard-sided carrying case, the kit includes a power supply, two each of 5", 9" and 18" data and power cables (both UDMA and SATA), SATA, firewire and mini USB cables, eSATA and microSATA cables, E01 file format software option, a compact flash card, CloneCard PRO PCMCIA adapter, 2.5", 1.8" and ZIF adapters, screwdriver, flashlight, a CD-ROM with Dossier software and a users manual







Markets - Support - Sales - Company Profile - Legal
Logicube Forensics Sitemap - Contact