Built as one of the most advanced computer forensic tools in the market, the RoadMASSter-3 X2 is a forensic portable lab designed as a high-speed forensic data acquisition and analysis workstation. The RoadMASSter-3 X2 is ruggedized, built for the road and equipped with all the necessary tools to seize data from drives with today's common drive interface technologies. With twice the CPU processing power as its predecessor, the RoadMASSter-3 X2 offers the forensic investigator a powerful and versatile platform for forensic data seizure and analysis. The RoadMASSter-3 X2 features native support for SAS, SATA, SCSI, USB 2.0 and USB 3.0 drives as well as other common drive interfaces through the use of optional adapters. Featuring advanced SATA-3 Acquisition Technology, the unit supports speeds exceeding 7GB/min for today's high speed drives and offers a maximum potential of 32GB/min, supporting tomorrow's advanced high speed drives. RoadMASSter-3 X2 is configured with a 1Gbit Ethernet port for network connectivity support. Data from suspect drives can be uploaded during acquisition for archiving, sharing or future analysis. In addition, the RoadMASSter-3 X2 supports SHA-1, SHA-2 and MD5 Hashing algorithms and features built-in NIST approved AES-256 Hard Drive Encryption support to secure evidence data for the purpose of transporting or storing drives containing sensitive information.
High-end Processing Power: The RoadMASSter-3 X2 unit comes standard with a powerful i7 CPU and is designed to support today and tomorrow's High Performance drives using Built-In 6Gb/s SAS Controller Technology. The unit supports advanced duplication technology that can perform multiple operations simultaneously, coping and wiping drives at a rate exceeding 7GB/min with a maximum transfer rate potential of 32GB/min.
Multiple Drive Interface Support: Offers native support for SAS, SATA, SCSI USB 2.0 and USB 3.0 drives, including Firewire 1394b drives. Optional adapters are available to support IDE Drives*, Micro SATA*, Mini-SATA, e-SATA Drives*, 2.5", 1.8" IDE Notebook Drives*, ZIF drives*, and Flash media*.
Multiple Built-In ports: Four SAS/SATA ports dedicated for evidence and suspect drives, one eSATA port, four general purpose USB 2.0,two USB 3.0 ports dedicated for evidence and suspect drives, two SCSI Ultra 320 68P ports dedicated for Evidence and Suspect drives, two Firewire 1394B ports dedicated evidence and suspect drives, 1 Gigabit Ethernet port, one HDMI Video Output port, one Audio Output port for external speakers or headphones, four drive power connectors for evidence and suspect drives, one display power connector, one dedicated USB keyboard port, one dedicated USB touchpad port.
Rugged Design: The RM-3 X2 unit comes in a portable, shock absorbent storm case, offering a tough, air and water tight design. At only 37 pounds, the unit is very portable and can be accepted as "carry-on" for transport.
Programmable "Suspect" Drive Ports: The flexible design allows any Evidence port to be configured as the "Suspect" port.
Multi-Session Capability: Capture multiple Suspect drives simultaneously or run multiple operations simultaneously. Multi-Session supports the high-speed duplication of up to 4 Suspect drives simultaneously. Capture SATA/SAS-to- SATA/SAS, USB-to-USB, SCSI-to-SCSI. Copy and sanitize drives at the same time.
Multiple Operational Modes:
- Single Capture: Creates "Mirror" image of the Suspect's drive.
- LinuxDD Capture: Supports storing one or multiple Suspect drive images on a single "Evidence" drive using the standard Linux DD Segmented File Format.
- E01 Capture: Supports storing one or multiple Suspect drive images on a single "Evidence" drive using the Encase® Forensics Segmented File Format.
- IQ Copy*: Optional Non-Forensic Format used to capture only the allocated data of a Suspect's drive, greatly reducing the time required to capture data. In addition, it can be used to duplicate drives for IT purposes such as backup, deploy and upgrade to larger capacity drives.
- LinuxDD/E01 Restore: Restore previously captured LinuxDD or E01 images to original bootable drive formats.
- WipeOut: Sanitize drives using Single Pass, DoD Standard, or Secure Erase. The unit has the ability to copy and wipe Hidden HPA or DCO areas which may exist on hard drives
*Offered as an add-on purchase
Multiple Hash Verifications: The RoadMASSter-3 X2 supports SHA-1, SHA-2 and MD5 Hash Algorithms.
External Storage: Images can be stored externally to a Shared Network folder or an ICS DFSS External Storage Module such as the 12 TB USB 3.0/e-SATA Storage Module.
Upload and Download Images to Storage Area Network: Images files can be uploaded and downloaded to a network storage area allowing the user to take advantage of large storage platforms for the purpose of processing and archiving images. With the use of the Optional 10 Gigabit Ethernet connection, units can copy and upload at speeds exceeding 4GB/min.
"On the fly" Drive Image Encryption*: Utilizing the built- in AES-256 Encryption Technology, the RoadMASSter-3 X2 can encrypt data during the Capture Process for the purpose of safeguarding sensitive information. An AES 256 encryption key is generated by the unit and can be saved to any USB thumb drive. The Eencrypted drive can be decrypted on-the-fly utilizingthe RoadMASSter-3 X2 or any PC loaded with the free ICS Decryption utility, along with the drive's AES 256 Encryption Key.
*This process is NOT compatible with the DiskCypher product line
ICS Digital Forensic Storage Solutions (DFSS): The RoadMASSter-3 X2 supports the use of the Optional ICS DFSS Modules to provide up to 12TB of additional Storage capacity.
LinkMASSter Option: The LinkMASSter Option allows the Forensic Investigator to acquire data from unopened computers using the Ethernet and iUSB Interface.
Color Display: Bright 15" Color LCD. Sunlight readable.
Modular Design: Provides ease of maintenance. Detachable Keyboard and mouse. Easy to remove internal drive.
Ease of Use: Offers an intuitive, user friendly interface.
Suspect Data Preview: Preview suspect drive's files prior to seizing data, by utilizing the unit's O/S Explorer functions or utilizing third party applications.
Network Storage Support: Upload and download images to and from a shared Network Storage location using the native 1Gigabit Ethernet Interface.
EMI Shielding: Aluminum enclosure used for EMI shielding and protection.
Built-in Cooling Fans: Built with quiet, high speed drive cooling fans.
Powerful Analysis Tool Support: Analyze write-protected data under the Windows® 7 environment using 3rd Party Forensic Analysis Applications such as Encase® from Guidance Software and FTK® from Access Data.
Logs and Auditing: Store and print detail operational Event Log and Audit Trail information. The Audit Trail is saved in a PDF format using 128-bit password encryption protection.
Cell Phone Acquisition Support: The RoadMASSter-3 X2 can be used to acquire cell phone data utilizing optional 3rd party cell phone acquisition software and hardware solutions. The units support the Micro Systemation XRY and Paraben's Device Seizure Cell Phone Acquisition Solutions.
Convenient and Easy Upgrades: Easily updates Software through the USB port. Free software updates are provided periodically.
WipeOut DoD Option: This option is designed to erase data on disk drives. WipeOut was designed to meet the U.S. Department of Defense specification DOD 5220-22M regarding the sanitization of hard disk drives.
WipeOut Fast Option: The Wipeout Fast option provides a quick non-DoD method of sanitizing a drive of all previously stored data.
Linux-DD Capture Mode: The LinuxDD Capture Mode supports seizing the entire contents of the Suspect's drive by capturing data as individual "LinuxDD" segmented files, which are stored in an individual subdirectory on the evidence drive. This option also allows any number of seizures to be performed using the same evidence drive, provided there is adequate space to save the seized data.
Single Capture Mode: Suspect drive will be captured sector by sector to the evidence drive.
Intelligent Capture Mode: The Intelligent Capture Mode (IQCopy) provides a fast method of seizing Windows FAT-16, FAT-32 and NTFS files systems. The file system is analyzed and only the allocated drive space is captured.
Dimensions: 21.7" x14.1" x 8.9"Weight: 37 lbsi7 CPU4GB DDR RAM (Upgradable to 8GB)320GB 2.5" SATA internal hard drive15" TFT Color LCD display super bright with 600 NITSSlim DVD-RW400 Watt Internal Power SupplyStereo SpeakersWarranty:One year Parts and Labor with an optional one year extended warranty.