Home page
Emergency Help
Evolution of Forensic Computing
Other Hardware
Evidential Software
Computer Electronic Disclosure
Training
Literature Requst
Investigation Services
Laboratory Services
Computer Forensic Systems

Disk Emulators

Disk Emulator Disk Emulator hardware automatically restores an image from tape and produces a clone of the target or suspect hard drive, performing integrity checks as the data is restored. This is an unattended operation without the need to attach the Disk Emulator to a computer system. On completion of the restore process the original image on tape is returned to safe storage.

The data from the hard drive under investigation can now be accessed as though it were the original hard drive simply by connecting the Disk Emulator directly to an investigation or host computer. A choice or read-only or read/write access investigation is provided and a display panel clearly shows the access mode and data status. The original image on tape is unchanged.

Disk Emulators are available as LTO or DAT versions to complement our wide range of imaging products. Forensic software tools are available to provide the facility to process and investigate the image held in read-only mode within the Disk Emulator.

Features of the Disk Emulators

  • High capacity: Capacities up to 1TB are available.
  • Choice of LTO Ultrium or DAT drive: LTO provides the highest performance while DAT provide a lower cost alternative.
  • Power-on diagnostics: Functional diagnostics performed by the internal CPU at power-on.
  • Choice or read-only or read-write operational modes: The operator can choose to allow the host computer to modify data on the "clone" disk. This facility is ideally suited to investigation of data in its original software environment.
  • Progress and status reporting: The front panel display provides progress display during cloning process and then provides full status information, including checksum to identify the image, when emulating.
  • Virtually unattended cloning operation: After the imaging tape has been loaded, the operator only needs to remove the tape when cloning is complete or when prompted for continuation media.
  • Anti-repudiation facility: The CRC32 checksum (generated during the imaging process) is transferred to non-volatile RAM and used to validate the data held by the Disk Emulator.
  • Secure erasure: Option to securely erase the internal disk before loading a new image.
  • Technical Support: A dedicated support team at Vogon will provide email and/or telephone support to ensure any technical issues are handled promptly and effectively.
  • Training: Full training on the use of Vogon products is available at Vogon's training centres in UK and Germany, or may be arranged at client's training facility.
To download a datasheet for detailed product specifications – in Adobe Acrobat (.PDF) format click here.

If you do not have Adobe Acrobat it may be downloaded from Adobe's website here.

Typical display when emulating with explanation below


Image: 15/11/99 Date when image was recorded to tape
(3ee1e908) Checksum unique to this image
Status: INTACT The data have not been altered
(Rd Only) Disk Emulator is operating in read-only access mode
 

Copyright Vogon International Limited. All rights reserved. Home Page | Investigation Services | Laboratory Services | Forensic Systems
Back to top