±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36738
New Yesterday: 0 Visitors: 143

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Remote forensic imaging tools?

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page 1, 2, 3  Next 
  

joey2011
Newbie
 

Remote forensic imaging tools?

Post Posted: Jun 09, 19 15:59

I'm trying to expand the companies I work with, and in order to do that I need to either fly or or have a way to remotely image phones, SD, USB, laptops and desktops. One way is to outfit a laptop with the necessary plugs and connections to do this or, find sobering that is already made to do this. So, I wanted to see if anyone knew of choices for this that work. I've Google and looked at the results but I'm not sure if I'm seeing all of it. Any help would be greatly appreciated.

Thanks  
 
  

Belkasoft
Senior Member
 

Re: Remote forensic imaging tools?

Post Posted: Jun 09, 19 17:03

- joey2011
I'm trying to expand the companies I work with, and in order to do that I need to either fly or or have a way to remotely image phones, SD, USB, laptops and desktops. One way is to outfit a laptop with the necessary plugs and connections to do this or, find sobering that is already made to do this. So, I wanted to see if anyone knew of choices for this that work. I've Google and looked at the results but I'm not sure if I'm seeing all of it. Any help would be greatly appreciated.

Thanks


Belkasoft Evidence Center (make sure you get Remote Forensics module). The trial is available at belkasoft.com/get
_________________
Computer, Mobile, RAM and Cloud Forensics In a Single Tool
belkasoft.com 
 
  

dandaman_24
Senior Member
 

Re: Remote forensic imaging tools?

Post Posted: Jun 09, 19 19:54

Evimentry - this offers a boot disk option where it can remotely connect and image to your storage destination.  
 
  

joey2011
Newbie
 

Re: Remote forensic imaging tools?

Post Posted: Jun 09, 19 21:58

Thanks for the info, I've just requested a price from Belkasoft. I'm also looking at Sumuri Recon Imager and Recon Triage bundle.  
 
  

Belkasoft
Senior Member
 

Re: Remote forensic imaging tools?

Post Posted: Jul 07, 19 16:14

- joey2011
Thanks for the info, I've just requested a price from Belkasoft. I'm also looking at Sumuri Recon Imager and Recon Triage bundle.

How was your Belkasoft trial?
_________________
Computer, Mobile, RAM and Cloud Forensics In a Single Tool
belkasoft.com 
 
  

Passmark
Senior Member
 

Re: Remote forensic imaging tools?

Post Posted: Jul 08, 19 01:51

How well does this work in practice?

If you have to image a 4TB drive remotely at 10Mbit/sec it is going to take 910 hours (38 continuous days). And this assumes there are no drop outs on either end for the duration, which of course there will be.

It is more more practical for a small half full 128GB drive (only 1 day). But not many machines have drives this small.

I know someone will say that 10Mbit/s is slow, but many people an asymmetrical internet connections. e.g. 50 down and 10 up.

And with self booting solutions, you are regularly going to come across machines with slightly unusual network environments, and device drivers will be missing for the network hardware in the self booting solution.  
 
  

Belkasoft
Senior Member
 

Re: Remote forensic imaging tools?

Post Posted: Jul 08, 19 04:56

- Passmark
How well does this work in practice?

If you have to image a 4TB drive remotely at 10Mbit/sec it is going to take 910 hours (38 continuous days). And this assumes there are no drop outs on either end for the duration, which of course there will be.

It is more more practical for a small half full 128GB drive (only 1 day). But not many machines have drives this small.

I know someone will say that 10Mbit/s is slow, but many people an asymmetrical internet connections. e.g. 50 down and 10 up.

And with self booting solutions, you are regularly going to come across machines with slightly unusual network environments, and device drivers will be missing for the network hardware in the self booting solution.


Great point. That's why it is more and more common to have partial acquisitions. Belkasoft supports both full acquisition (compression is supported) and only selected folders or even selected types of artifacts transfer.
_________________
Computer, Mobile, RAM and Cloud Forensics In a Single Tool
belkasoft.com 
 

Page 1 of 3
Page 1, 2, 3  Next