FX-AIO Drive Cloning, Erasing & Forensic Imaging

FX-AIO Drive Cloning, Erasing & Forensic Imaging

The next-generation of our ground-breaking FX-AIO forensic imager, the FX-AIO has been engineered specifically for digital forensic investigations. Delivering high performance and advanced features, the FX-AIO is designed to meet the challenges of digital investigations head-on. Efficient and secure digital evidence collection is accomplished with a feature-set that provides sophisticated functionality with a goal to shorten acquisition time. Future-focused, the FX-AIO sets new standards in digital forensic imaging technology

• Extremely fast forensic imaging speed surpassing 50GB/min. Clone PCIe to PCIe at speeds of 69GB/min
• Image and verify from 4 source drives to 6 destinations for ultra-efficient imaging
• Targeted Imaging feature creates a logical image to capture only specific files needed and shorten acquisition time. Use Partition Imaging feature to select and image specific partitions on the source drive
• Concurrent Image+Verify feature. Verification begins while the imaging process is occurring. Duration of total image plus verification process time may be reduced by up to half
• Image to or from a network location using two 10GbE connections for fast network imaging performance
• Network capture. Capture network traffic, VOIP, internet activity
• Multi-task. Image from multiple sources simultaneously. Little or no speed degradation when imaging from two sources to two destinations

Features

• The FX-AIO is an extremely fast forensic imaging solution. It achieves imaging speeds surpassing 50GB/min and can clone PCIe to PCIe at speeds of 69GB/min.
• Image and verify to multiple image formats; native copy, .dd image, .dmg image, e01 and ex01. The FX-AIO provides MD5, SHA1, SHA256, and dual hash (MD5+SHA1) authentication at extremely fast speeds.
• FX-AIO formats destination drives to NTFS, exFAT, EXT4, or FAT32 file systems. The unit supports imaging from source drives formatted to any major file system.
• Four Write-blocked source ports include 2 SAS/ SATA, 1 USB 3.0, 1 PCIe. Six Destination ports include 2 SAS/SATA, 2 SATA, 1 USB 3.0 and 1 PCIe. All destination ports are built-in to the unit, no additional module or bay attachments required.
• Two 10GbE network ports provide state-of-the-art connectivity for fast network imaging performance.
• I/O card ports. Designed for the future, the FX-AIO includes 2 source I/O card ports and 1 destination I/O port to support new interface technologies as they arrive on the market. Thunderbolt/USB 3.1 Gen 2/USB-C I/O card planned for Q4 2018.
• Networking Feature. Use the FX-AIO to image to a network location using CIFS protocol and/or image from a network location using iSCSI. Users can use iSCSI as a source or destination drive. Image to an external storage device such as a NAS, using the Gigabit Ethernet, USB 3.0 or SAS/SATA connection.
• Network Capture. Capture network traffic, internet activity and VOIP. Sniff data on a network and store captured packets on a hard drive connected to FX-AIO.
• Multi-Task. Image simultaneously from multiple sources to multiple destinations including a network repository. Supports imaging to one location while simultaneously hashing and/or wiping a second drive. Users can perform up to 5 tasks concurrently. Little or no speed degradation when imaging from two sources to two destinations.
• Task Macro. Set specific tasks to be performed sequentially; first wipe the destination drive then hash the source drive then image the source drive. All tasks within the Macro will be performed automatically.
• Parallel Imaging. Perform multiple imaging tasks from the same source drive to multiple destinations using different imaging formats. Clone to a network location or a destination drive using mirror copy mode while simultaneously imaging in e01 or .dd format to a different destination drive.
• Targeted Imaging/Logical Imaging feature shortens acquisition time. Create a logical image by using pre-set filters, custom filters, file signature filters, and/or keyword search function to select and acquire only the specific files you need. An MFT report can be generated that contains a potential deleted file list. Format output to LX01, ZIP or directory tree. Users can browse and view directly on the FX-AIO display, or manage and view on a networked FX-AIO from your laptop/desktop using a web browser.
• Partition Imaging. Select and image specific partitions on the source drive.
• Write-Blocked Drive Preview. Preview drive contents directly on the Falcon®-NEO. The file browser feature provides logical access to source or destination drives connected to FX-AIO. Users can view the drive’s partitions and contents and view text files, jpeg, PDF, XML, HTML files. Other methods to preview include using the file browser feature and FX-AIO’s web browser on a PC/laptop or preview over a network via SMB or iSCSI (as an iSCSI target). 3rd party analysis tools can be used with SMB or iSCSI methods.
• Broad interface support. The FX-AIO provides built-in support for SAS/SATA/USB3/PCIe storage devices including solid state drives. PCIe drives require an optional adapter kit. mSATA, microSATA and eSATA drives are supported with adapters included with the unit. IDE drives, and flash drives are supported with optional adapters. Support for SCSI devices will be available with an optional module available in early summer 2018.
• PCIe Support. Support for imaging to/from M.2 PCIe (SATA, AHCI, and NVME types), PCIe and mini-PCIe express cards is available using the FX-AIO’s 4-lane PCIe source and destination ports and optional adapters.
• Concurrent Image+Verify. Imaging and verifying concurrently takes advantage of destination hard drives that may be faster than the source hard drive. Duration of total image+verify process time may be reduced by up to half.
• BitLocker Support. Image source drives that have been encrypted using BitLocker. Decrypt partitions (requires the BitLocker password ) and then image the selected partitions.
• n Secure sensitive evidence data with whole drive AES 256 bit Encryption. Decryption can be performed using the FX-AIO or by using open source software programs such as VeraCrypt, TrueCrypt or FreeOTFE.
• Network Push Feature. Push evidence files from destination drives connected to FX-AIO or from a FX-AIO repository to a network location. An MD5 or SHA hash is performed during the push process.
• Image from a MAC with USB-C ports using a USB-C to USB-A cable and Target Disk Mode. Users can also image from MACs using the USB boot device. Create a forensic bootable USB flash drive to image a source drive from a MAC on the same network without booting the MAC’s native O/S. The FX-AIO supports imaging from MacBook Pro systems.
• Image from a PC/laptop without removing hard drives. Create a forensic bootable USB flash drive to image a source drive from a computer on the same network without booting the computer’s native O/S. Supports Surface Pro 4 and above laptops.
• Image restore feature. File to drive mode restores DD, DMG, E01, EX01 images created by the FX-AIO to another drive.
• Remote Operation. Connect to a networked FalconNEO from your PC using a web browser to manage all operations remotely. This feature provides automatic page scaling for iPAD type devices and authentication/password for increased security.
• Administrative feature allows users to save configuration settings and set password-protected user profiles.
• Features an internal, removable storage drive that stores O/S and audit trail/logs. The drive is easily removed for secure/classified locations.
• Image from a CD/DVD Blu-Ray. The FX-AIO can image CD/DVD/Blu-ray media by using a USB optical drive connected to the USB port on the FX-AIO. Supports multi-session CD/DVDs.
• Wipe drives to DoD specifications or use secure erase to wipe drives. Speeds of 30GB/min for SATA type drives and 72GB/min for PCIe drives.
• Audit Trail/Log files provide detailed information on each operation. Log files can be viewed on FX-AIO or via a web browser, exported to XML, HTML or PDF format to a USB enclosure. Users can print the log files directly from their PC when connected to FX-AIO via a web browser.
• Quiet Operation. The FX-AIO has been designed to minimize noise during operations
• Additional features include HPA/DCO capture, drive spanning, color touchscreen display, HDMI port, two USB 3.0 host ports for keyboard, mouse or printer connectivity, blank disk check feature, drive trim feature, and S.M.A.R.T. data.