Logicube Introduces the New Forensic MD5

The new Logicube Forensic MD5 is engineered to the world’s top law enforcement agencies’ exacting standards. This new generation of forensic hard-drive acquisition systems is specifically designed for the requirements of law enforcement, military, MIS/IT, corporate security, investigators, and auditors. This high-speed, hardware-based, data acquisition system runs at 3 GB/min., simultaneously capturing, imaging, verifying, and keyword searching the data at full speed. The MD5 represents a new era in data acquisition, ensuring that court validated processes are followed each and every time.

The system’s unidirectional, non-tampering drive-capture ensures exact, bit-for-bit duplication and verification, including deleted files, hidden files, and file slack. The Forensic MD5 also features DD imaging, allowing the user to choose 650 MB, 1 GB, 2 GB, and 4 GB images. With its lightweight portability, rugged construction and field-tested capabilities, the MD5 represents a new level of performance for law enforcement, field investigators, military, MIS security, laboratories, and auditors.

To ensure the user cannot over-write or corrupt the suspect’s drive, the system copies only from an external source. The Forensic MD5 is compatible with all standard or proprietary operating systems, virtually any size or type of drive (IDE, EIDE, UDMA, SCSI), and is designed with a controlled airflow system to ensure no loss of data due to drive overheating.

The MD5 system features a variety of connectivity options to speed the data capturing process. With the USB Adapter, investigators may quickly access suspect drives (IDE, EIDE, UDMA, SCSI). They may also choose to acquire the suspect drive directly using the IDE cables, through the parallel port, through the PCMCIA port (with the optional CloneCard Pro®).

The optional Desktop Write PROtect™ with USB capability guarantees read-only access when analyzing the destination drive under Windows. This ensures full destination drive protection against inadvertent or intentional over-writes.

The fully integrated “QWERTY” keypad is designed for easy entry of file names, user credentials, and keywords. The advanced, hardware-based search engine allows users to concurrently search for hundreds of user selected words, on-the-fly, at full speed.

With the MD5’s 128-Bit authentication, the unit provides the highest level of accuracy and verification, computing a hash value signature match of both suspect and evidence drive in real time. This ensures that the:

1. Source drive has not been changed
2. Source and destination drive match after capture
3. Source and destination do no match prior to capture.
4. Data image is 100% legally sound for successful prosecution

The new system also features a Compact Flash port to store keywords lists, perform fast software updates, and debug traces. The MD5 unit also allows the user the option of computing a hardware or software CRC-32 signature of suspect and evidence drives before and after capture.


(20.04.2004)

All companies featured within the TEK-Centre section of www.forensic.e-symposium.com hold the Copyright to their press release article unless otherwise stated.