LinkMASSter II Forensic Data Acquisition Tool With Hard Case

Product Number: F.G-3950-900A

The LinkMASSter II Forensic Data Acquisition Tool is a high-speed device that provides the hardware and software necessary to seize data from a suspect’s unopened notebook or PC using a FireWire 1394A/B or USB 1.0/2.0 interface.

The LinkMASSter II Forensic Data Acquisition Tool supports the MD5, CRC32 or SHA1 hashing methods during data capture, ensuring that the transferred data is an exact replica of the suspect’s data without modification. The machine can seize data from PATA, SATA, SCSI or notebook drives. Data transfer rates can exceed 3GB/min. Multiple Capture modes are available. The LinkMASSter II Forensic Data Acquisition Tool comes standard with WipeOut software, which can be used to erase a hard drive in fast mode or in DoD mode, which erases drives to DoD specification.

The user can acquire data from a notebook or PC by imaging the suspect's hard drive through USB or FireWire ports. This unique data acquisition tool captures data at speeds exceeding 2 GB/Min without removing the hard drive. The Link MASSter II uses write protect to block writes to suspects hard drive and hashes the data captured with MD5, CRC32 or SH1.

This unit comes standard with a hard protective case.

Features

FireWire 1394B and USB 2.0 Interface: LinkMASSter II supports capturing data from an unopened computer through a high speed FireWire 1394B or USB 2.0 interface.
MD5 and CRC32 and SHA1 Hashing: MD5, CRC32 or SHA1 hashing generation can be performed during data capture, ensuring that the transferred data is an exact replica of the suspect’s data without modification.
Forensic Toolkit Graphical User Interface: The LinkMASSter II Forensic Toolkit application provides all the tools necessary to perform high speed forensic data seizure operations.  The interface runs on the Windows XP Professional platform.
High Speed Operation: Data transfer rates can exceed 3GB/min.
Multiple Capture Methods: Data can be captured in a forensic sector-by-sector format method or using a segmented file format method (LinuxDD).  The LinuxDD capture method allows copying multiple images to one Evidence drive.  The program records only allocated data using the “Intelligent Copy” method, which supports Windows FAT-16, FAT-32 and NTFS file systems.
Write Protection: The suspect’s data is write protected by the LinkMASSter II Forensic Toolkit application.
Multiple Media Support: The machine supports data transfer between PATA, SATA and SCSI hard disk drives.  There is a built in standard 2.5" interface which supports capturing data to notebook drives.
WipeOut: Sanitize drives at speeds greater than 3GB/min.
Audit Trail and Logs: Detail operational event log information can be printed or saved.

Software

LinkMASSter Application: The LinkMASSter application, combined with the unit’s built-in FireWire/USB interface, provides a fast and effective solution for seizing drive data from a suspect’s unopened PC or notebook to an evidence drive connected to the LinkMASSter II unit.  The application is run from the supplied LinkMASSter bootable CD, which write protects the suspect’s drive during initialization and during data acquisition. 
Hashing: The LinkMASSter application supports on-the-fly hashing using MD5, CRC32 and SHA1.
Single Capture Option: This option allows the seizure of data in a Forensic sector-by-sector format method.
LinuxDD Capture Option: The LinuxDD Capture option supports seizing the entire contents of the suspect’s drive by capturing data as individual “LinuxDD” segmented files, which are stored in an individual subdirectory on the evidence drive.  This option also allows any number of seizures to be performed using the same evidence drive, provided there is adequate space to save the seized data.
Intelligent Capture Option: The Intelligent Capture option (IQCopy) provides a fast method of seizing Windows FAT-16, FAT-32 and NTFS files systems. The file system is analyzed and only the allocated drive space is captured. 
WipeOut DoD Option: WipeOut was designed to meet the U.S. Department of Defense specification DOD 5220-22M regarding the sanitization of hard disk drives.
WipeOut Fast Option: The Wipeout Fast option provides a quick non-DoD method of sanitizing a drive of all previously stored data. 

Optional Software

LM Forensic for Mac: This software allows the user to copy unopened Macintosh computers, sector by sector, with the highest standards of verifications - MD5/SHA-1/SHA-2. 

Optional Hardware

Serial-ATA Adapters: Single Channel SATA adapters are available to support seizing data to SATA drives cost $149.00 each).
Thermal Serial Printer: The thermal serial printer is used for printing out Forensic Audit Trail information while connected to the suspect's PC/notebook. The Audit Trail provides detail information about the seizure operation performed (cost $150.00).
Thermal Serial Printer Roll Paper: The Thermal Serial Printer uses thermal paper rolls (cost $115.00 for 20 rolls), size 4 1/8” x 8’ x 2”.  

Specifications

Supply Voltage: 100 - 240V / 50 - 60 Hz
Power Consumption: 3.5W without drives
Operating Temperature: 5 degrees - 55 degrees C
Relative Humidity: 20% - 60% non-condensing
Net Weight: 0.55 lbs
Overall Dimensions: 5.5” x 3” x 1”
Universal Auto-Switching input voltage