• The ability to pause and resume imaging jobs, including resumption from power
loss and certain types of job failures.
• The ability to prevent damage to disk drives by spinning them down when they
are ejected from TX1 prior to physical removal.
• The ability to power down TX1 after the last active job is complete.
• Browser based remote user interface to any number of network connected TX1s,
with the ability to directly download selected files to the remote system.
• User management ‒ create, delete, and manage user profiles.
• Superior network imaging performance through a 10 gigabit Ethernet interface,
with auto-negotiation for use with slower 1 gigabit Ethernet networks.
• Superior data transfer rates, even while performing calculations of MD5, SHA-1,
and SHA-256 hash values on two active jobs.
• Viewing extensive drive detail, including partition and filesystem information
and raw hex data.
• Detection and notification of many popular encryption types (whole disk and
volume based), RAID types, proprietary self-encrypting drives, and Apple
device Core Storage volumes.
• The ability to unlock Opal-compliant self-encrypting drives (SEDs) and
BitLocker-encrypted drives/partitions to enable unencrypted source media
acquisition, and as an alternative to Tableau encryption for destination/accessory
port media.
• The ability to unlock APFS-encrypted volumes to enable unencrypted source
media acquisition (source ports only).
• Browsing drive filesystems, with the ability to view image and text files directly
in TX1 user interface.
• Extensive filesystem support - APFS, ExFAT, NTFS, EXT4, FAT(12/16/32), and
HFS+.
• Whole disk, open standard, destination drive encryption using XTS-AES.
• Automatic blank checking of source and destination drives.
• Comprehensive destination/accessory drive wiping capabilities, including NIST
800-88 compliant wipes and the ability to specify a custom wipe pattern.
• HPA, DCO, and AMA support for the detection and handling of hidden/
protected data areas on source drives. This includes standalone HPA/DCO/AMA
disablement, DCO/AMA “shelving,” and trim support for the creation of a
destination DCO or AMA.
• The ability to update system time via an NTP server.
• Detailed forensic logs for case documentation in text and HTML formats.
• The ability to filter the forensic log list to only show logs of interest based on
specific case and/or drive information. The filtered logs can also be exported or
deleted.
Chapter 2 Overview
10
OpenText™ Tableau™ Forensic TX1 Imager
ISTX240300-UGD-EN-1
To Next Page
Loading...
