Laptop for Forensic Investigations (Reloaded)

I have a hard time arguing against the Mac but there is one other alternative I found, I think via suggestions on this board.

The RAID drive set up looks nice.

Check out the Sager Notebooks
http//www.sagernotebook.com/category_browse.php?cid=&price_s=1999

Greetings,

Not only does it have an internal RAID, it has an external eSATA port. Sweet.

-David

Greetings,

Not only does it have an internal RAID, it has an external eSATA port. Sweet.

-David

To be picky wink , if it was an internal one, it would have been an isata port 😯

D

jaclaz

We just received our new Alienware x15

SSD on OS
8 GB RAM
i7 Quad
eSATA ports

Very fast. We are going to use it in the field for data acquisitions via T35es and through to eSATA out. Then we can also do some field analysis with the speed of that puppy. Also, another system that can be used in the lab next to the desktop machines for analysis.

Let me tell you about our Sagers and Alienware laptops…

of the 4 Sagers, 1 caught on fire(literally…flames out the back), 2 power supplies burned out, 1 won't turn on anymore, Firewire ports on 3 stopped working and all 4 had to be plugged in at all times because they were hogs on the battery.

Alienware simply fell apart. Keys fell off, ran slower and slower. Overheated when I ran searches with Encase, but DANG they look sexxxxxy!!! )

In short, take all of these messages with a grain of salt b/c we all have our own preferences.

We are using MacBook Pros, but I'm sure that you can find something else for cheaper.

Sounds like you want a Mac. So buy one )

If you want to do forensics at the laptop level, and not just acquires, but process intensive operations - get the beefiest non-gaming Intel based laptop you can afford.

And to the mac lovers, yes you can do forensics with a mac book, but you can also do forensics in a Windows VM running under a Windows OS. I personally choose to do forensics on a Windows OS and not a VM under Windows, so why would I choose to do forensics in a Windows VM running under MacOS?

Let me tell you about our Sagers and Alienware laptops…

of the 4 Sagers, 1 caught on fire(literally…flames out the back), 2 power supplies burned out, 1 won't turn on anymore, Firewire ports on 3 stopped working and all 4 had to be plugged in at all times because they were hogs on the battery.

Alienware simply fell apart. Keys fell off, ran slower and slower. Overheated when I ran searches with Encase

Dear God man please tell me you have AC in your office!!

Laptops are a tricky bunch in general as you tend to be at the mercy of the manufacture. I tend to build the lab systems in small form factors just in case we do need heavy processing in the field. They are somewhat portable as they can be strapped on to a hand cart with the write blocker and disk duplicator cases.

Sounds like you want a Mac. So buy one )

If you want to do forensics at the laptop level, and not just acquires, but process intensive operations - get the beefiest non-gaming Intel based laptop you can afford.

And to the mac lovers, yes you can do forensics with a mac book, but you can also do forensics in a Windows VM running under a Windows OS. I personally choose to do forensics on a Windows OS and not a VM under Windows, so why would I choose to do forensics in a Windows VM running under MacOS?

This is not specific to Mac OS but there is an advantage to using VMs. If something crushes your Windows OS install you just use your backup copy of the VM container. You don't have to rebuild your whole environment.

We just received our new Alienware x15

SSD on OS
8 GB RAM
i7 Quad
eSATA ports

Very fast. We are going to use it in the field for data acquisitions via T35es and through to eSATA out.

I'm sure you've seen or use TIM?

Do you see a big or any difference when you're able to use it in the field vs. some other software when imaging?