The SMA-CP01 high-speed hard disk copier is a high-tech forensic equipment that is efficient and high-performance. The system adopts multiple hardware based read-only interfaces, which can effectively ensure that data in various storage media is not modified after being connected to the host and during the analysis process, meeting the judicial fairness requirements of electronic evidence data. The system is embedded with several major functional modules such as disk clone replication, mirroring, data fragmentation, hash verification, and online mounting, perfectly meeting the business needs of domestic judicial forensics.
Features
1.Support direct analysis of computer storage media, support DD, IMG, 001, DMG, E01, L01 and other formats of image file analysis, support VMDK, VHD, VDI, HDS, QCOW2, VHDX and other virtual disk file analysis, and support individual directory and file loading.
2.Supports information parsing, application program parsing, and file system parsing for Windows, Mac OS, and Linux operating systems
3.Support Foxmail, Outlook Express(DBX), Office Outlook(PST,OST), Lotus Notes(NSF), EML and other client mail analysis.
4.Support online record analysis function, according to the type of website, online time and other comprehensive summary analysis of different browsers, and can manually edit classified websites.
5.Supports diversified user behavior analysis functions, which can classify the events of each day according to the time(such as Internet access,mail,chat,file operation,etc.), and can carry out chart statistics.
Specifications
1.Supports automatic resolution of applications such as key chains and FSEvent logs in MAC operating systems
2.supports simultaneous search of multiple keywords, wildcard matching search, automatic search of sensitive information such as bank account, mobile phone number, and ID card number, and simultaneous fool search of case files and sensitive information. The system automatically saves the search and filtering results, and supports two or more searches and filtering, and supports dynamic combination filtering of search results, which can dynamically filter out files that match multiple keywords at the same time.
3.Support photo gallery display function, support pictures according to different sizes, and click to enlarge the function, support video file the first frame picture in the gallery display function.
4.Displays registry files on disk automatically and exports registry analysis reports on web pages.
5.It can quickly summarize and make statistics on disk file information and extracted sensitive information, which is convenient for forensic personnel to quickly view and master the case situation.
6.It can export web version of analysis reports, Word version of custom analysis reports, and Word version of the report template can be customized.
7.The file viewer feature lets files be viewed using specified third-party tools, which can be added using Viewer management.
8.Supports HP dual-cycle and RAID1 functions in RAID disk arrays