Multi-drive forensic duplication system
The OpenText™ Tableau Forensic TD4 Duplicator is next-generation technology designed as a budget-friendly, easy-to-use solution for standalone forensic acquisitions of common physical media (PCIe, USB, SATA and SAS). TD4 delivers the ideal combination of features and performance to handle smaller-scale triage, acquisition and media management workloads.
Ease Of use The TD4 retains settings across power cycles, allowing users to start a forensic acquisition with a single click. Administrative controls can also be set to assist more junior investigators, including limiting functionality, ensuring evidence security or guiding a user to a predetermined job configuration.
Maximizing use of resources Organizations on tight budgets often re-use destination media between cases to save costs. As a suspect source drive is imaged, examiners must ensure the destination media has been wiped clean of any previous case data to prevent cross-case contamination and ensure forensic integrity. Often a separate product is needed to wipe drives, but the the Tableau Forensic TD4 Duplicator provides a ‘Reconfigure’ option for users to decide what combinations of actions (wipe, format, encrypt) they want to apply to connected destination media, saving the need for another tool. Both clear and purge disk wipe capabilities are available adhering to NIST standards. Additional wipe configurations are also available to ensure the destination media is ready for reuse. The TD4 can then format a filesystem back on the drive and encrypt it, if desired, making it ready for use in the next investigation. This ‘Reconfigure’ option improves the efficiency of the destination media management process by conducting these operations consecutively rather than as standalone operations
Corporate applications In addition to acquisitions from corporate devices, TD4 includes an “IT mode,” which allows the Duplicator to be repurposed for on-site imaging and delivery (for new employee laptops, for example) without the extra steps it normally performs for forensic integrity or chain of custody.
