email: sales@visualux.com

Ditto DX Forensic FieldStation

Digital investigation, eDiscovery, forensic data acquisition

Image, clone or browse SATA, IDE, USB3, ethernet devices; write to LAN, dual SATA or USB3 targets.

Product name: Ditto DX Forensic FieldStation

Host (I/O) Ports

(1) IDE/PATA -- source side
(2) USB 2.0 -- for peripheral attachment
(3) USB 3.0 -- one source, two destination -- up to 5 Gbps
(3) eSATA -- one source, two destination -- up to 6 Gbps
(3) Gigabit (1000Base-T) Ethernet -- one source, one destination, one GUI access

Drive Types Supported

PATA/IDE 2.5" drives (with PATA Adapter 25)
PATA/IDE 3.5
SATA 2.5" drives
SATA 3.5" drives
iSCSI (network attached SCSI)
SATA SSD (solid state drives)
SAS 2.5" drives (with SAS Expansion Module)
SAS 3.5" drives (with SAS Expansion Module)
Hitachi 1.8" drives (with PATA Adapter 25)
Toshiba 1.8" drives (with PATA Adapter 18-TOSH)
MacBook Air 2010 (with SATA Adapter)
MSATA (with SATA Adapter)
Mini PCIe PATA (with PATA Adapter mPCIe)
Mini PCIe SATA (with PATA Adapter mPCIe)
Mini PCIe USB (with PATA Adapter mPCIe)
PCIe/NVMe (with adapter)
USB Thumb Drives (USB 3.0/2.0/1.1)
USB drives via USB cable (USB 3.0/2.0/1.1)
FireWire drives via FireWire cable (with FireWire Expansion Module)

Sector Size Compatibility Compatible with 512n drives as well as Advanced Format 4Kn and 512e type drives

SATA Speed 6G

Supports S.M.A.R.T. disk info Yes

Number of LEDs 15

Description of LEDs LED for each data connection (lit when connected) plus a light bar showing operating status

Audible alarm Yes

LCD Screen Four-line backlit LCD controlled with four soft-touch menu navigation buttons. Browser-based Ditto interface allows for direct operation, remote operation, and administration.

LCD Info 4 lines x 20 characters width

LCD Backlight Yes (backlighting can be disabled using stealth switch)

Stealth Mode Disables all light output (LEDs/LCD). LCD readable with night-vision goggles.

Navigation menu LCD/button driven menu system

Web admin interface Operable from a web browser

Operating system compatibility:

Windows XP or later
Mac OS X 10.4.x or higher
iOS Tablets/phones
Android Tablets/phones
Most versions of Linux

Browser compatibility:

Internet Explorer
Firefox
Safari
Chrome
Opera

Detects/reports HPA/DCO Yes

Allows HPA/DCO override Temporarily or permanently remove HPA/DCO

Fan(s) Fanless design

Construction material(s) All-aluminum construction

Ambient humidity range 5% to 95%, non-condensing

Power switch 2 position: On / Off

Power input 60W 12V 5A DC

Power input connector Barrel connector (center pin positive)

Dimensions 4.92" x 6.77" x 1.72" (125mm x 172mm x 43.7mm)

Weight 5.00 lbs. (2.27 kg)

Write Blocking Yes (source side)

Write Blocked ports:

eSATA (SATA), PATA/IDE, USB 3.0; other input types and drive types supported with Ditto Expansion Modules or drive adapters

Hashing Yes

Hashing info:

None, MD5, SHA-1, SHA-256, MD5 + SHA-1, MD5 + SHA-256. Hash types are hardware-accelerated; can hash during image or clone.

Erase modes:

Clear Partition Table, Quick Erase, Custom Erase, Secure Erase Normal, Secure Erase Enhanced, DoD Clear, DoD Sanitize, NIST800-88 Clear, NIST800-88 Purge

Image/clone output modes:

Single Drive Image, Single Drive Clone, Image and Clone, Image to mirrored disks, Clone to mirrored disks

Compliancy

FCC, UL, CE, RoHS, RCM

Warranty WiebeTech provides a 3-year limited warranty for this product.

Technical Support:

Your investment in WiebeTech products is backed up by our free technical support for the lifetime of the product. If you need to contact us for any reason, visit wiebetech.com/support or call us at +1 (360) 816-1800.

About Ditto DX Forensic FieldStation

Next-generation imaging

The Ditto DX Forensic FieldStation has been optimized for various forms of media, including SATA SSDs, NVMe/PCIe SSDs, hard drives, SD and CF cards, and others.

Compromise-free peripheral management

Ditto DX improves on the original Ditto with an additional control interface that sports dedicated Ethernet and USB ports for remote access and connecting peripherals. What's more, this frees the USB and Ethernet ports that were meant for imaging and capturing data to be used only for those purposes.

Time-saving Logical Imaging

With hard drives and networked file shares exploding in size, Logical Imaging is more important than ever. Ditto DX Logical Imaging performance is twice that of the original Ditto device. And with automatic, pre-selected search and acquire capability, Ditto DX slashes the time it takes to capture needed evidence. You can also create your own search and collection scripts for an even more targeted approach.

Remote operation

An easy-to-use web browser interface supports remote operation via network or VPN, providing access to Ditto configuration, user administration and user rights, as well as direct operation of Ditto cloning and imaging operations.

Create logical and physical images in the field

The built-in menu system makes it easy to configure and perform forensic captures without an attached computer. Optionally, attach a computer for additional options such as generating complete listings of drive or file system contents to facilitate discovery, or automatically capture specific file types.

Source Inputs (write-blocked)

Ditto natively supports many write-blocked inputs: SATA, eSATA, PATA, USB3.x/2.0. Additional acquisition interfaces are available via expansion modules, such as the Ditto SAS Expansion Module, Ditto FireWire Expansion Module, and Ditto Network Tap Module.

Destination Outputs

Use dual SATA outputs simultaneously with same performance as one eSATA (single, dual and mirrored). Images can also be output to large volumes, including NAS and other network destinations, as well as portable RAID enclosures.

Data Acquisition Modes

Clone, DD, E01, L01 with MD5, SHA-1, or SHA-256 hashing. Ditto DX also offers a combined mode that captures a clone and DD or E01 (to different destination drives) in a single pass reading of the suspect drive.

Pause and Resume

The Ditto family of imagers was the first to include a pause and resume feature. When creating a Physical Image DD, the investigator may pause the imaging process, disconnect everything for secure storage and then come back later to resume the image without losing any previous work.

Image Restore

Restore an image to a Destination drive to create a bootable clone of the original drive.

S.M.A.R.T. and hdparm Data

Ditto DX allows investigators to collect S.M.A.R.T and hdparm data for any connected device.

Hard Drive Password Lock/Unlock and Encryption

Ditto DX automatically identifies drives that are firmware password protected. The investigator may enter the password, if known, to unlock the drive. Ditto DX also supports whole disk encryption using the AES 256 OPAL encryption schema. If known, the investigator can enter the passphrase to decrypt the drive for imaging.

PCIe Support

Ditto DX supports imaging NVMe drives and using NVMe drives as a Destination device. Additionally, other PCIe devices can be accessed using PCIe adapters.

Complete and Secure Erasure

Ditto DX is capable of sanitizing drives with preset erase modes or a user configurable pattern. NVMe devices and other drives can be securely wiped using a variety of sanitization modes including DOD Clear and Sanitize modes plus NIST800-88 Clear and Purge. The drive can also be formatted after the erase is complete.

Water-resistant, dust-proof Pelican® custom carrying case available

Convenient, customized field kits are available for Ditto and accessories.

Model

Case Type

Description

Ditto Field Kit DX

Pelican 1450

This kit holds a Ditto DX and up to four Ditto Expansion Modules. The carrying case is available empty or with various tools included for forensic investigations, including a Forensic UltraDock and Forensic ComboDock.

Ditto Field Kit K-DX

Pelican 1510

Also known as "Quad Ditto Carrying Case," this rolling, dust-proof, water-resistant case features custom foam with slots for up to 4 Ditto DX's, expansion modules, write-blockers, and accessories

Ditto Field Kit L-2

Soft side zipper case

This highly-portable kit includes slots for a Ditto DX, up to two pocket drives for target storage, a CD/DVD reader, accessories, and a Media WriteBlocker

Test drive a Ditto DX today

Take advantage of our unique ability to take control of an online demo unit!