The SuperImager Desktop NVMe + SATA unit is a forensic lab multi-port imager with mixed NVMe and SATA ports, runs on Linux open OS and supports many different kinds of digital storage devices including the latest NVMe SSDs. It is a useful unit that allows the user to mix and cross-copy the two different classes of storage devices SATA and PCIe.
The unit has two built-in four NVMe ports and four SATA ports which enable the user to image any combination of NVMe to NVMe, SATA to SATA, NVMe to SATA, SATA to NVMe, and all that in multiple parallel sessions.
In addition, the user can save the captured image to the network in a parallel run to the drive imaging.
The SuperImager application also supports split image mode to increase the speed which is useful when the source drive is much faster than the target drive (for example, when using an NVMe Suspect drive).
The imaging speed is extremely fast when capturing from an NVMe SSD to another NVMe SSD. A test run with the Samsung MZVPV512HDGL NVMe SSDs ended with the average speed of 93.7GB/min.
The unit is supplied with four PCIe SFF-8639 external cables and NVMe to M.2 adapters with mounting and locking brackets.
The external PCIe SFF-8639 cables provide a flexible solution to cover both NVMe M.2 and 2.5” form factors.
In addition, the unit has a built-in e-SATA port, eight USB3.0 ports, and a high-speed USB3.1 Gen2 port.NVMe SSD is a non-volatile storage media that is attached via the PCIe bus. It uses PCIe communication and storage protocols to reduce the I/O overhead and brings various improved performances and reduced latency in comparison to SATA SSDs. Using the PCIe 3.0 bus enables NVMe SSDs to achieve even a higher performance, and can run at incredible speeds.
Capturing data (Forensic imaging) from NVMe SSD is not a simple task as capturing data from SATA drives. The PCIE bus is not hot-pluggable and it needs a special hardware to deal with. In addition, there are no conversion adapters from SATA/SAS to PCIE storages.
The SuperImager Forensic application runs under Linux OS, and supports the following operations: Selective Imaging – Triage (files and folders), Complete Imaging (Mirror Image, DD, E01/Ex01 with compression and multiple compression engines, Mixed Capture Mode of DD and E01, Split Image mode, Partition mode), Keyword Search prior to imaging or while the running the imaging, Virtual Drive Emulator, on-the-fly Encryption/Decryption, simultaneous HASH calculation (can run all the 3 HASH engines MD5, SHA-1, SHA-256 at the same time), Drive Sanitizing, File Viewing, Remote Capture from un-opened laptops and tablets (for Intel-based CPUs), Save or Capture to or from Network, and some other useful features such as Remote Access, Scripting, and Loading/Saving unit’s Settings.