MSI Plus Portable Forensic Imaging Unit
The MSI Plus Forensic unit is a Portable forensic imager with the ability to serve as a complete Field Computer Forensic Investigative platform, allowing the user to capture data in the field from multiple sources to multiple targets simultaneously and extremely fast. It also enables the user to perform a full Forensic analysis using a third-party application like Encase. Additionally, the unit can also capture data from multiple cellphones and run cellphone analyses. The unit is durably built and easy to carry, comprising of a full-blown Desktop CPU, enabling the unit to have a high performance (this is different from laptops and other mobile solutions). The unit is built with 4 SAS/SATA and 4 USB3.0 ports that supports SAS/SATA hard disk drives, SSD, and USB Flash drives. The unit’s fast Thunderbolt 3.0 port (40gigabit/s) enables the user to capture data from additional interfaces, especially NVMe and SSD. The user can also use the port to connect to 10Gigabit/s networks, enabling the user to store the captured data..
Cost Effective
- Capture data simultaneously from 2 "Suspect" drives; at the time it takes other imaging devices to complete one
- Run Virtual Drive Emulator on “Suspect” drive
- Run Multiple Cellphones Data Extraction
- Run Full Forensic Analysis
Features
- Captures data from storages devices with many types of form factors and interfaces(2.5”, 3.5”, mSATA, Micro SATA, M.2 SATA, M.2 NVMe, U.2 NVMe)
- USB3.1 ports can be converted to SATA ports with the use of USB3.1 to SATA adapters (4 ports USB adapter KIT)
- Previews data on the “Suspect” drive in secure environment
- Captures and saves images across many ports and interfaces
- Captures modes 1:1, 1:2, 2:2 SAS/SATA, same for USB
- Forensic image from multiple “Suspect” drives to one large “Evidence” drive
- Simultaneously calculates HASH values: MD5/SHA1/SHA2
- Automatic support for DCO/HPA areas
- Supports Imaging of one partition
- Supports Bad Sector Handling (with 3 types of reporting)
- Encryption with AES256 on-the-fly and decrypt at remote location
- Supports save Images (DD, E01) to Network (NFS, CIFS, SAMBA) and capture from a Network via iSCSI storage protocols. Easy upload mode from 8 ports
- Supports capture modes: % (adjustable) bit by bit copy, Linux-DD files, E01, EX01 with up to 16 compression engines
- Remote-Capture data from an un-open Laptop/PC Via USB or Ethernet ports
- Automated process using Scripting
- Use the Unit as “writes block” to preview, capture from storage devices attached to the unit and upload then to the server via iSCSI protocols
Dual Boot
-
For Data Capture
- Perform Forensic Imaging under most efficient Linux OS for a faster & more secure operation
To Analyze the Captured Data
- Use third-party applications to perform data analysis and cellphone extraction
Fast & Affordable
-
Acquire data from:
- Drives: SAS/SATA/IDE
- Flash drives: MSATA/MicroSATA /M2. SATA
- SCSI/1394/TB/M.2 PCIE NVME*
- Multi-Media Cards
- SSD and USB Storage Devices
- Network
* With Optional hardware via TB port
Main Hardware Features: | |
---|---|
Case: | Mobile, lightweight, Rugged, and easy to carry |
CPU: | i7 Latest generation CPU |
Display: | 12”, LED back-light, touchscreen, color LCD display. |
OS: | Linux Ubuntu 64 bit and Win 10 Professional 64 Bit in a dual boot. |
Security: | Linux OS (Linux is less targeted by malware). |
Application Updates: | The application can easily be updated via USB thumb drive and displays a special update application screen. |
Hardware: | Very high-quality, high performing components; some with military specifications |
Hardware Upgrade: | The unit can be upgraded at the time of purchasing for additional cost to a larger internal SSD. |
Hardware Specifications: | |
RAM: | 16GB DDR4 internal memory |
Internal Storage: | 250GB SSD SATA |
Storage Controller: | PCI Express 3.0 SAS/SATA controller supporting 6 Gigabit/s SAS/SATA interface speeds with a maximum data rate of 37GB/min. |
Hardware Supports: | |
Target Ports: | Two SAS/SATA ports and two USB3.0/USB3.1 ports. |
Source Ports: | Two SAS/SATA ports and two USB3.0/USB3.1 ports are set as source ports (the user cannot change the role of these ports). |
Thunderbolt 3.0 port: |
|
Supports Storage Protocols and Interfaces: | SAS, SATA, e-SATA enclosures, IDE, USB2.0, USB3.0/3.1, MMC, M.2 SATA, SCSI*, FC*, 1394* and NVMe*. |
Supports Form Factors: | 3.5”, 2.5”, ZIF, 1.8”, Micro-SATA, Mini-SATA, Slim SATA, Ultra Slim SATA, M.2 SATA, PCIE-Memory Card*, Mini PCIE*, SFF-869 U.2 NVMe*, M.2 NVMe*, and CF-30. *With the optional TB 3.0 Expansion Option, Expansion storage controllers, and KITS. |
Application Settings: | |
HPA/DCO Automatic Supports: | The application has the ability to automatically open HPA and DCO areas and re-size the drive to its full native capacity in order to erase any “hidden data” (HPA/DCO are special areas on the drive that support this feature). |
Bad Sectors Handling: | The user can select to skip bad sectors/blocks or abort the operations. The skipped bad sectors will be reprted in the log file in detailed or in summary. |
48bit LBA Addressing: | Supports drives with sizes up to 256TB. |
Application Features: | |
GUI: | The application is built with large, very simple, and easy-to-navigate icons. In a few clicks, the user can set the operation, and it will quickly start up and run. |
Speed: |
|
Application Main Operation: | |
Forensic Imaging Mode:
|
|
Parallel Operations: | |
|
|
Parallel Operations - Linux Elaborated |
|
More Features |
|
Expansion Capabilities and Main Hardware Options: |
|
Ports: |
|
Power Characteristics |
|
Operating Environment: |
|
Mechanical Characteristics |
|
Included Items: |
|
Custom Field
- 12” Touchscreen color LCD Display
- 4 USB3.1 Ports & 4 SAS/SATA Drive’s Bay Slots
- Thunderbolt 3.0 port
- Top Speed: HASH @ 32GB/Min, Image @ 29.5GB/min w/ SSD &HASH & Image@ 10GB/Min w/1TB drives