cru wiebetech forensic ultradock...4 protectin your diital assets tm cru wiebetech forensic...

6
Protecting Your Digital Assets TM CRU ® WiebeTech ® Forensic UltraDock User Manual Features Provides write-blocked access to attached drives Four separate host attachment options (USB 3.0, USB 2.0, FireWire 800, and eSATA) for compatibility with virtually any computer Multiple LEDs indicate operational status, including disk activity, hidden area detection, error state, and the status of power input and output LCD menu allows user to configure settings and view information on attached drives Detects and indicates hidden areas (HPAs or DCOs) found on hard drives Able to temporarily or permanently unhide HPAs and DCOs Aluminum case for rugged durability and excellent heat dissipation Compatible with forensic acquisition and analysis software

Upload: others

Post on 25-Feb-2021

2 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: CRU WiebeTech Forensic UltraDock...4 Protectin Your Diital Assets TM CRU WiebeTech Forensic UltraDock User Manual MENU ITEM SUBMENU ITEM ACTION View Drive Info Disk Temp Displays the

Protecting Your Digital AssetsTM

Wiebetech Branding

2c85m76yPMS 711C

66c7m7yPMS 299C

Product Name:Univers 73 Black Extended

abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ

CRU® WiebeTech® Forensic UltraDockUser ManualFeatures

• Provideswrite-blockedaccesstoattacheddrives

• Fourseparatehostattachmentoptions(USB3.0,USB2.0,FireWire800,andeSATA)forcompatibilitywithvirtuallyanycomputer

• MultipleLEDsindicateoperationalstatus,includingdiskactivity,hiddenareadetection,errorstate,andthestatusofpowerinputandoutput

• LCDmenuallowsusertoconfiguresettingsandviewinformationonattacheddrives

• Detectsandindicateshiddenareas(HPAsorDCOs)foundonharddrives

• AbletotemporarilyorpermanentlyunhideHPAsandDCOs

• Aluminumcaseforruggeddurabilityandexcellentheatdissipation

• Compatiblewithforensicacquisitionandanalysissoftware

Page 2: CRU WiebeTech Forensic UltraDock...4 Protectin Your Diital Assets TM CRU WiebeTech Forensic UltraDock User Manual MENU ITEM SUBMENU ITEM ACTION View Drive Info Disk Temp Displays the

2

Protecting Your Digital AssetsTM

CRU WiebeTech Forensic UltraDock User Manual

1.2 IDENTIFYING PARTS

TakeamomenttofamiliarizeyourselfwiththepartsoftheForensic

UltraDock. This will help you to better understand the following

instructions.

TABLE OF CONTENTS1Pre-Installation 2

1.1PackageContents 2

1.2IdentifyingParts 2

1.3LEDBehavior 3

1.4WarningsandNotices 3

1InstallationSteps 3

2HowtoUsetheLCDInterface 3

3HPA/DCOHandling 4

4UpdatingFirmware 4

5ForensicSoftwareUtility 5

6TechnicalSpecifications 6

1 PRE-INSTALLATION

1.1 PACKAGE CONTENTS

Thefollowing listcontains the itemsthatare included in the

completeconfigurationforthisdevice.PleasecontactCRUif

anyitemsaremissingordamaged:

Accessories Quantity

ForensicUltraDock 1

ACadapterandpowercord 1

USB3.0cable 1

FireWire800cable 1

eSATAcable 1

SATAdriveattachmentcable 1

IDEcable 1

MolexMini-Fittolegacypowercable 1

Metaldriveplate 1

Packetofscrewsandbumpers 1

QuickStartGuideandWarrantyInfo 1

TOP VIEW

FanFailIndicator

Write-BlockIndicator

PowerOutputStatusLED

HPA/DCOIndicator

DriveAccessLED

LCDScreen

Navigationbuttons PowerSwitch

PowerInputStatusLED

ErrorLED

FRONT VIEW

AdminConfigPort

FireWire800Connectors

USB3.0Connector

eSATAConnector

REAR VIEW

eSATAConnector

MolexMini-FitPowerConnector

IDE/PATAConnector

Page 3: CRU WiebeTech Forensic UltraDock...4 Protectin Your Diital Assets TM CRU WiebeTech Forensic UltraDock User Manual MENU ITEM SUBMENU ITEM ACTION View Drive Info Disk Temp Displays the

3

Protecting Your Digital AssetsTM

CRU WiebeTech Forensic UltraDock User Manual

• Remove the drives before transporting the Forensic

UltraDocktopreventdamagetothedriveinterfaces.

FORENSIC DEVICE USER ADVISORYBeforeusingthistoolforaccessingsensitivedata,verifythewrite-

blockingfunctionoftheproduct.Youcandosobydownloadingand

installing the Forensic SoftwareUtility and following the instruc-

tionsinitsUserManualforperformingawrite-blocktest.SeeSec-

tion5fordownloadandsetupinstructions.

1 INSTALLATION STEPSa. Usetheprovidedscrewstoattachtheprotectivemetalplate

tothebottomofyour3.5”harddrive.Thisstepisoptional.The

purpose of the bottom plate is to provide protection to the

driveelectronicsofyourharddrive.

b. Ifyou’reattachinganIDE/PATAdrive,configurethejumperson

therearofthedrivetoMaster.Consulttheinstructionsonyour

harddrive’slabel.

c. ConnecttheForensicUltraDocktothedrive(oradapter),using

the IDE ribbonand theMolexMini-Fit to legacypowercable

for IDE/PATAdrivesor theunifiedSATAdata/powercablefor

SATAdrives.

d. Ifyou’reusinganadapter,connectthedrivetotheadapter.

e. Connect the eSATA, FireWire, or USB cable from your

computertothecorrespondingportontheForensicUltraDock.

f. ProvidepowertotheForensicUltraDock.Connecttheincluded

AC adapter or a SATA power cable from the inside of your

computercase.

g. Turnonthepowerswitch.

Youarenow ready touse theForensicUltraDock toaccess the

drive.

2 HOW TO USE THE LCD INTERFACEUse the LCD and 4-button navigation interface to view informa-

tion about the attached drive and the Forensic UltraDock. On

the4-buttoninterface,UpandDownallowyoutoscrollthrough

options,whileEnter selectsanoptionandBackgoesbacktothe

previousscreen.Thecontentsof themenuare listedon the fol-

lowingpage.

SIDE VIEW

DCPowerConnector

SATAPowerConnector

1.3 LED BEHAVIOR

LED COLOR STATE DESCRIPTION

PowerOut Green SolidTheForensicUltraDockispoweredonandoutputtingpower.

PowerIn Green Solid TheForensicUltraDockisconnectedtopower.

Write-Block Green Solid Write-Blockedmodeisenabled.

Error Red SolidThereisaproblemwiththeForensicUltraDock.PleasecontactTechnicalSupport.

DriveAccess Amber SolidorBlinking

Dataiscurrentlybeingaccessedfromtheattacheddrive.

HPA/DCO Green Solid

Ahostprotectedarea(HPA)ordeviceconfigurationoverlay(DCO)hasbeendetectedontheattacheddrive.

1.4 WARNINGS AND NOTICES

Pleasereadthefollowingbeforebeginninginstallation.

General Care

• ThemaincircuitboardoftheForensicUltraDockissusceptibleto

staticelectricity.Propergroundingisstronglyrecommendedto

preventelectricaldamagetotheenclosureorotherconnected

devices, includingthecomputerhost.Avoidalldramaticmove-

ment,tappingontheunit,andvibration.

• Avoid placing the hard drives close tomagnetic devices, high

voltagedevices,ornearaheatsource.Thisincludesanyplace

where the productwill be subject to direct sunlight. DoNOT

allowwatertomakecontactwiththedriveortheForensicLab-

Dock.

Page 4: CRU WiebeTech Forensic UltraDock...4 Protectin Your Diital Assets TM CRU WiebeTech Forensic UltraDock User Manual MENU ITEM SUBMENU ITEM ACTION View Drive Info Disk Temp Displays the

4

Protecting Your Digital AssetsTM

CRU WiebeTech Forensic UltraDock User Manual

MENU ITEM SUBMENU ITEM ACTION

ViewDriveInfo DiskTemp Displaysthetemperatureoftheattacheddrive,displayedin°C.

Capacity(MB) Displaysthecapacityoftheattacheddrive,measuredinmegabytes.

Manufacturer Displaysthemanufactureroftheattacheddrive.

Modelnumber Displaysthemodelnumberoftheattacheddrive.

Serialnumber Displaystheserialnumberoftheattacheddrive.

Firmwarerev Displaysthefirmwarerevisionoftheattacheddrive.

HPAsize(MB) Displaysthesizeofthehostprotectedarea,ifany,ontheattacheddrive.Measuredinmegabytes.

DCOsize(MB) Displaysthesizeofthedeviceconfigurationoverlay,ifany,ontheattacheddrive.Measuredinmegabytes.

Diskhealth DisplaystheS.M.A.R.T.statusoftheattacheddrive.

Start/Stops Displayshowmanytimestheattacheddrivehasspunupandspundown.

Powercycles Displayshowmanypoweron/offcyclestheattacheddrivehasundergone.

Badsectors Displaysthenumberofbadsectorsreportedbytheattacheddrive.

ViewDockInfo ProductName Displaysthebrandnameoftheproduct(e.g.ForensicUltraDock)

UniqueID# Displaysthespecific,uniquenumberassignedtotheunitforidentification,akintoaserialnumber.

FirmwareVer.# DisplaystheversionofthefirmwarecurrentlyinstalledontheForensicUltraDock.

CreateHPA/DCO SetDCOSize ThisoptionisonlyavailableifnoHPAexistsonthedrive.ItallowsyoutosetanewsizefortheDCO.PressUporDowntosetanewsizefortheHPA,andEntertoconfirmthechoice.Thediskcapacityavailabletoacomputerwillbereducedbythisamount.Setthevalueto0tohavenoDCO.Valuesexceedingtheavailablecapacitywillnotbeaccepted.

SetHPASize AllowsyoutosetanewsizeforanHPA.PressUporDowntosetanewsizefortheHPA,andEntertoconfirmthechoice.Thediskcapacityavailabletoacomputerwillbereducedbythisamount.Setthevalueto0tohavenoHPA.Valuesexceedingtheavailablecapacitywillnotbeaccepted.

3 HPA/DCO HANDLINGTheForensicUltraDockwillchecktoseeifanyHPAs(hostprotectedareas)orDCOs(deviceconfigurationover-

lays)arepresentonstartup.IfanHPAorDCOisdetected,theForensicUltraDockwillindicatethatonehasbeen

foundandaskwhatyouwanttodowithit.UsetheUpandDownbuttonstoscrollthroughtheoptions,shown

below,andthenpressEntertoselectanoption.

DCO FOUND HPA FOUND

Keep DCO–LeavestheDCOinplace Keep HPA–LeavestheHPAinplace

Remove DCO–PermanentlyremovestheDCO,

exposinganyhiddendatawithinthatarea

Remove HPA Temp–TemporarilybypassestheHPAsothatdatawithinitcanbeaccessed

Remove HPA Perm–PermanentlyunhidestheHPA

Page 5: CRU WiebeTech Forensic UltraDock...4 Protectin Your Diital Assets TM CRU WiebeTech Forensic UltraDock User Manual MENU ITEM SUBMENU ITEM ACTION View Drive Info Disk Temp Displays the

5

Protecting Your Digital AssetsTM

CRU WiebeTech Forensic UltraDock User Manual

4 UPDATING FIRMWARECRUprovidesfreefirmwareupdatesfortheForensicUltraDockthroughourConfiguratorapplication.

Downloadithere:www.cru-inc.com/support/software-downloads/configurator-software-download/

Setup Instructions

ConnectthetheprovidedUSBmicro-Bcabletothe“Admin”portontheForensicUltraDockandconnecttheother

endtoyourcomputer.Then,turnontheForensicUltraDock.Finally,opentheConfiguratorapplication.

Ifyourproductisrunningoutdatedfirmware,youwillseeapromptaskingyoutoupdateonceyouopentheCon-

figuratorapplication.Followtheinstructionsontheprompttoupdatethefirmware.

5 FORENSIC SOFTWARE UTILITYTheForensicUltraDockiscompatiblewithCRU’sForensicSoftwareUtilityapplication.Thissoftwareallowsyou

toperformawrite-blocktestonyourForensicUltraDock,displaydetailsaboutattacheddrives,andsavethatdata

toafileforeasyinclusioninacasereport.

Downloadithere:www.cru-inc.com/support/software-downloads/forensic-software-utility/

Setup Instructions

Connect theForensicUltraDocktoyourcomputerwithanattacheddriveasyounormallywouldandturn the

ForensicUltraDockon.ThenopentheForensicSoftwareUtility.

ForinformationonHPA/DCOhandling,seeSection3.

Page 6: CRU WiebeTech Forensic UltraDock...4 Protectin Your Diital Assets TM CRU WiebeTech Forensic UltraDock User Manual MENU ITEM SUBMENU ITEM ACTION View Drive Info Disk Temp Displays the

Protecting Your Digital AssetsTM

For more information, visit the CRU web site.

www.cru-inc.com

6 TECHNICAL SPECIFICATIONSProductModels ForensicUltraDock(Model:FUDv5.5)

U.S.PatentNo. 8,090,904

DriveInterfaceTypes&Speeds

PATA/IDE:upto133MB/sSATA(witheSATAcable):upto6Gbps

HostInterfaceTypes&Speeds

eSATA:upto6GbpsUSB3.0:upto5GbpsFireWire800:upto800MbpsUSBMicro-B:upto480Mbps(Adminconfigurationonly)

DriveTypesSupported 2.5”and3.5”rotationalandsolidstateSATAdrives3.5”rotationalIDE/PATAdrives2.5”rotationalIDE/PATAdrives*,Hitachi1.8”drives*,Toshiba1.8”drives*,MacBookAir2010*,MacBookAir2011*,mSATA*,miniPCIePATA*,miniPCIeSATA*,miniPCIeUSB**RequirestheappropriateCRUSATAorPATAadapter

HostDataConnectors One(1)USB3.0connector(backwardscompatiblewithUSB2.0)One(1)eSATAconnectorTwo(2)FireWire800connectors

SupportedOperatingSystems

Windows10,8,7,andVistaWindowsServer2012and2008productfamiliesMacOSX10.4.xorhigher(USB3requires10.8orlater)Linuxdistributionsthatsupporttheconnectiontypeused

Compliance EMIStandard:FCCPart15ClassA,CEEMCStandard:EN55022,EN55024RCM

ProductWeight 0.4pounds(0.18kg)

ProductDimensions 2.95”x4.33”x1.06”(75mmx110mmx27mm)

TechnicalSupport YourinvestmentinCRUproductsisbackedupbyourfreetechnicalsupportforthelifetimeoftheproduct.Contactusthroughourwebsite,cru-inc.com/supportorcallusat1-800-260-9800or+1-360-816-1800.

©2015,2017CRUAcquisitionGroup,LLC.ALLRIGHTSRESERVED.

ThisUserManualcontainsproprietarycontentofCRUAcquisitionGroup,LLC(“CRU”)whichisprotectedbycopyright,trademark,andotherintellectualpropertyrights.

UseofthisUserManualisgovernedbyalicensegrantedexclusivelybyCRU(the“License”).Thus,exceptasotherwiseexpresslypermittedbythatLicense,nopartofthisUserManualmaybereproduced(byphotocopyingorotherwise),transmitted,stored(inadatabase,retrievalsystem,orotherwise),orotherwiseusedthroughanymeanswithoutthepriorexpresswrittenpermissionofCRU.

UseofthefullForensicUltraDockproductissubjecttoallofthetermsandconditionsofthisUserManualandtheabovereferencedLicense.

CRU®andWiebeTech®(collectively,the“Trademarks”)aretrademarksownedbyCRUandareprotectedundertrademarklaw.ThisUserManualdoesnotgrantanyuserofthisdocumentanyrighttouseanyoftheTrademarks.

Product WarrantyCRUwarrantsthisproducttobefreeofsignificantdefectsinmaterialandworkmanshipforaperiodoftwoyearsfromtheoriginaldateofpurchase.CRU’swarrantyisnontransferableandislimitedtotheoriginalpurchaser.

Limitation of LiabilityThewarrantiessetforthinthisagreementreplaceallotherwarranties.CRUexpresslydisclaimsallotherwarranties,includingbutnotlimitedto,theimpliedwarrantiesofmerchantabilityandfitnessforaparticularpurposeandnon-infringementofthird-partyrightswithrespecttothedocumentationandhardware.NoCRUdealer,agent,oremployeeisauthorizedtomakeanymodification,extension,oradditiontothiswarranty.InnoeventwillCRUoritssuppliersbeliableforanycostsofprocurementofsubstituteproductsorservices,lostprofits,lossofinformationordata,computermalfunction,oranyotherspecial,indirect,consequential,orincidentaldamagesarisinginanywayoutofthesaleof,useof,orinabilitytouseanyCRUproductorservice,evenifCRUhasbeenadvisedofthepossibilityofsuchdamages.InnocaseshallCRU’sliabilityexceedtheactualmoneypaidfortheproductsatissue.CRUreservestherighttomakemodificationsandadditionstothisproductwithoutnoticeortakingonadditionalliability.

FCC Compliance Statement: “ThisdevicecomplieswithPart15oftheFCCrules.Operationissubjecttothefollowingtwoconditions:(1)Thisdevicemaynotcauseharmfulinterference,and(2)thisdevicemustacceptanyinterferencereceived,includinginterferencethatmaycauseundesiredoperation.”

ThisequipmenthasbeentestedandfoundtocomplywiththelimitsforaClassAdigitaldevice,pursuanttoPart15oftheFCCRules.Theselimitsaredesignedtoprovidereasonableprotectionagainstharmfulinterferencewhentheequipmentisoperatedinacommercialenvironment.Thisequipmentgenerates,uses,andcanradiateradiofrequencyenergyand,ifnotinstalledandusedinaccordancewiththeinstructionmanual,maycauseharmfulinterferencetoradiocommunications.Opera-tionofthisequipmentinaresidentialareaislikelytocauseharmfulinterferenceinwhichcasetheuserwillberequiredtocorrecttheinterferenceatthisownexpense.

IntheeventthatyouexperienceRadioFrequencyInterference,youshouldtakethefollowingstepstoresolvetheproblem:

1) Ensurethatthecaseofyourattacheddriveisgrounded.2) UseadatacablewithRFIreducingferritesoneachend.3) UseapowersupplywithanRFIreducingferriteapproximately5inchesfromtheDCplug.4) Reorientorrelocatethereceivingantenna.

PartNumber:A9-000-0057Rev1.2

FOROFFICEORCOMMERCIALUSE

1000SETechCenterDrive,Suite160,Vancouver,WA98683