TD3 – Unique Among Forensic Imaging Tools
There are forensic imaging tools and then there is the Tableau TD3 Forensic Imager. The TD3 is truly one of a kind. At its core TD3 is a high performance, reliable, and easy to use forensic duplicator – with a high resolution, touch screen User Interface (UI). Today, TD3 is capable of forensic data collection from SATA, IDE, USB 3.0/2.0/1.1, SAS, and FireWire (1394A/B) drives. No other forensic duplicator available today matches TD3 for its unique combination of performance, packaging, forensic capabilities, and usage models.
Collect Evidence from a Variety of Storage Drives, Including USB 3.0
TD3 supports collecting data in a forensically sound (a.k.a. “write-blocked”) manner. SATA, USB 3.0, USB 2.0/1.1, and FireWire devices connect directly to TD3 using the appropriate port. IDE and SAS devices can be imaged thru TDPX5 (IDE) and TDPX6 (SAS) expansion modules. Keyed guides in the TDS1 SATA enclosure allow for easy connecting of TDPX modules with the TD3 expansion port.
Multiple Options for Safekeeping Your Evidence
TD3 offers a variety of evidence storage options. Each TD3 Forensic Imager kit includes one TDS1 SATA drive enclosure. This unique SATA drive enclosure directly connects to TD3, forming a stable and clutter free base. No need for cable connections when using TDS1. The SATA power and signal connections are made directly between the TD3 and TDS1.
If your preference is to collect evidence to other storage devices, TD3 gives you options. TD3 supports imaging to bare hard drives or to other Tableau Modular Storage Products with the appropriate cables (included in the TD3 kit). Additionally, TD3 has a Gigabit Ethernet connection that can be used to image or upload previously imaged evidence directly to iSCSI or CIFS network files shares.
Monitor and Control with a Unique Touch-screen UI
Central to the uniqueness of TD3 is a high-resolution, color touch screen user interface, used to control and monitor ongoing TD3 operations. Designed to be powerful yet simple to use, this wizard driven UI uses simple touch gestures to select and initiate all TD3 functions. To facilitate easy data entry, TD3 includes a pop-up software touch-screen keypad for entering data, reviewing logs, connecting to networks, or completing setup. If a physical keypad is preferred, connect an external keyboard thru the TD3’s general purpose USB 2.0 port. With the TD3, we’ve taken the art of duplicator design to a new level.
View Drives and Collect Evidence as a Remote Write Blocker
There are instances when central command may want or need to preview or collect data from a storage device located thousands of miles away. When used as a network-based write blocker, TD3 supports this. With the appropriate IP address, remote PCs can access TD3’s via the internet. Storage devices connected to TD3’s write blocked ports are presented as an iSCSI target. In this manner, remote PCs can browse or even collect data from the remote storage device. In many instances, accessing data remotely is more convenient and possibly safer than physically transporting the storage devices.
Which Usage Mode Do You Need?
TD3 provides the usage mode flexibility that is required by forensic professionals today. Check out the various ways that TD3 can be adapted to your forensic process by clicking on any of the tabs below:
- Imaging to local hard drives
- Imaging to network share
- Imaging Apple Macs in target disk mode
- Network based write blocking