Evaluate: ICS-JMR USB-C to SATA DriveLock forensic disk controller

By  |  0 Comments
Related Products

Since SSDs and conventional exhausting drives lack a jumper or change for write safety, legislation enforcement and investigative providers use forensic disk controllers to keep away from knowledge corruption.

Palms-on: ICS-JMR USB-C to SATA DriveLock forensic disk controller
Since SSDs and conventional exhausting drives lack a jumper or change for write safety, legislation enforcement and investigative providers use forensic disk controllers to keep away from knowledge corruption.

One of many issues dealing with IT employees in digital forensics is securely gathering knowledge from fashionable exhausting drives—in contrast to floppy disks and SD playing cards, there is no such thing as a jumper to set on fashionable exhausting drives that forestalls writes from being dedicated to the drive.

When working with drives pulled from computer systems seized for proof, plugging these drives right into a second pc for evaluation may end up in unintended penalties, as Home windows will change the entry time on recordsdata which are accessed, and should (over)write non permanent recordsdata on the mounted quantity, probably destroying beforehand deleted recordsdata which will function proof.

SEE: Fast Glossary: Stable State Drives (TechRepublic Premium)

To beat this potential threat, forensic disk controllers are in a position to mount drives as read-only, stopping the potential for overwritten recordsdata because of background processes on Home windows. Use of forensic disk controllers additionally gives a protection in opposition to the potential of allegations that drive contents have been altered throughout investigation.

ICS-JMR DriveLock: USB-C to SATA

The latest model of the DriveLock is a USB-C to SATA mannequin, eliminating the necessity for the comparatively unpleasant, and never altogether widespread USB three.zero micro-A connector generally present in mainstream USB to SATA drive converters. There is not any enclosure to lock the drive in, which usually makes it simpler to make use of, although customers will want a flat floor to work on to keep away from disconnecting the drive whereas in operation.

Electrically, the DriveLock just isn’t altogether dissimilar to plain USB to SATA drive converters—an SSD or 2.5″ HDD may be powered by way of USB, whereas a three.5″ HDD requires an (included) 12v AC adapter. Standing LEDs point out if energy is being delivered, in addition to drive exercise and presence of the USB connection.

It is also attainable to make use of SATA bridges with M.2 SSDs (supplied they natively help SATA signaling), ICS-JMR additionally gives IDE, MicroSATA, e-SATA, ZIF, and 1.eight” IDE adapters to be used with the DriveLock. Whereas these adapters weren’t examined, all the SSDs and HDDs examined labored completely with the DriveLock, together with nonstandard drives just like the Seagate ST1000DM003, a three.5″ drive, which is thinner than commonplace exhausting disks, and located generally in small form-factor (SFF) workstations from Dell and others.

Likewise, testing disks on Home windows, Mac OS, and Linux went easily, with no troubles detecting the drive. Regardless of a number of inventive makes an attempt in gparted and fdisk on Linux to persuade the pc to mount the amount with write privileges, knowledge on the check drives couldn’t be overwritten.

The USB-C to SATA DriveLock is offered direct from ICS-JMR for $249.

For extra, take a look at “The desktop is lifeless, and Intel’s NUC killed it: AMD to construct a SFF PC package” and “Kioxia reveals what to anticipate within the subsequent decade of flash storage” on TechRepublic. 

Additionally see

drivelock-rear-panel-connectors-10052-1555448120-1280-1280.jpg

Picture: JMR-ICS

happywheels

You must be logged in to post a comment Login