Forensics investigators, and techs who want to create a digital forensic workstation rely upon the CRU® WiebeTech® LabDock™. Installed in a standard 5.25″ bay, the Forensic LabDock gives convenient, forensic access to suspect hard drives. Write-blocking is done in hardware, with proven WiebeTech write-blocking technology.
Write-blocked access to thumb drives is just as convenient as write-blocked SATA and IDE. The Forensic LabDock FLDu model also incorporates a USB WriteBlocker, so you can forensically access USB thumb drives or many full size USB enclosures. Most USB 1.1 and 2.0 devices that normally register with the computer as a “USB Mass Storage Device” are supported.
Do you know what could be lurking in the hidden areas of a hard drive? HPA (Host Protected Areas) or DCO (Device Configuration Overlays) can exist on hard drives, which are not detected or accessible by your operating system. The Forensic LabDock will alert you if these areas exist, so you can inspect them. The Forensic LabDock comes with software to let you choose how to handle any hidden areas it encounters.
Forensic LabDock offers native connections for the most common drives types, such as SATA and IDE/PATA. Optional SATA and PATA Adapters are available that allow access to many additional types of drives such as ZIF drives, notebook drives, drives found in iPods, and more. SATA and PATA Adapters work with many of our docking products, including the Forensic LabDock.
- 2-year warranty
- Includes cables
- Free US-based customer support
Whether you’re a forensic investigator, technician, or cyber security analyst, the CRU WiebeTech Forensic LabDock is a necessary part of your toolkit.
- WHAT IS AN HPA AND A DCO?
- Host Protected Area (HPA) and Device Configuration Overlay (DCO) are reserved areas on a hard drive that are not accessible by the BIOS or OS. Data can be hidden behind an HPA or DCO. CRU forensic devices can alert you if there is an HPA or DCO so that you are aware of it and can take the necessary steps to retrieve the hidden data.
- WHY IS IT NECESSARY TO UPDATE THE FIRMWARE OF MY CRU FORENSIC DEVICE?
- Firmware relates to the programs and data that control electronic products. Firmware is enhanced over time, usually to add new features or increase compatibility. Updating firmware can improve the functionality and dependability of your product. If your CRU forensic device is using outdated firmware, CRU’s Configurator application can recognize this and implement up-to-date firmware on your device. See Section 4 of this manual for more information.
- MY FORENSIC LABDOCK WORKS GREAT WITH SATA DRIVES BUT I AM HAVING COMPATIBILITY ISSUES WITH IDE/PATA DRIVES. WHAT SHOULD I DO?
- First, check to make sure the SATA data/power connector is unplugged from the SATA output port. IDE/ PATA drives cannot be recognized if a SATA connection is made with the SATA output. Next, check to make sure the 4-pin legacy Molex power cable is plugged into the IDE/PATA drive. If the power and host connection are securely attached to the drive, then the IDE cable may be faulty. Contact Technical Support for further instructions.
- HOW SHOULD I SET MY IDE/PATA HARD DRIVE JUMPER SETTINGS?
- Try the “Master” configuration on your hard drive first. Some hard drives have two different “Master” settings one for when there is a secondary “slave” drive present and one for when there is no slave drive 9 Protecting Your Digital AssetsTM Forensic U5 User Manual present. Choose the setting with no slave present. There may be some drives that will not work with either of these settings. The next choice is “Cable Select”. If this does not work, try using no jumpers. If you’re unsure how to change the jumper configuration, check the manual that came: with your hard drive or the manufacturer’s website. Some drives also have the information printed on the label.