■Evidence Preservation Tool MASAMUNE Clone Forensic Edition Features

●Linux based software running from CD・Physical reproduction of data on external HDD without removing internal HDD* from PC.・Can support all interfaces and create physical copies of

various electronic recording media.

*HDD: hard disk drive.

●Depending on combination of hardware and cables being used, high speed of 42 GB/min (actual measured value) can be achieved.

●Proprietary Algorithm (patent pending) reduces the number of read errors・Can create highly accurate clone disks by storing addresses of skipped bad sectors

and unreadable regions and repeating read operations on them.

●Can generate electronic signature using content of the log which is encrypted using proprietary algorithm and detects unauthorized log alteration.

●Identity verification using hash value・Can verify identity of data using hash value calculated by hash function.

●Source and Target confirmation・Can protect from misoperations and accidental original overwriting by confirming the

connected device (electronic recording media).

Clone Forensic Edition

■MASAMUNE Clone Forensic Edition Algorithm・Avoids retry operation on sector where read error occurs using proprietary algorithm.

1）Skip Operation (Normal Copy Mode).　Avoids read error by skipping sectors in the order of their occurrence.

2）Detailed repeated reading of the skipped sectors (Final Copy Mode).　Reliable physical reproducing of the skipped sectors.

Reliable software duplicator quickly supportingyour work through preservation of evidence fordigital forensic investigation.This is the MASAMUNE Clone Forensic Edition!

■What functions are required in an evidence preservation tool?

●Complete (physical) reproduction・Processing of bad sectors (do not skip / terminate with errors).・Avoidance / reduction of read errors.

●Identity verification・Data identity verification using hash value calculated by hash function and binary comparison of bit strings from

copy source and target.

(According to the 3rd edition of the IDF evidence preservation guidelines)

●Working log generation・Detailed information about damaged and recovered data.・Work results including work content, addresses of unreadable sectors, etc.・Detect unauthorized log alteration.

　　　　　　　　　　　　　【Application examples】MASAMUNE Clone Forensic Edition can be used in the following cases.

1) Copying contents of the disks of a notebook PC which is hard to dismantle. Physical reproduction of data on external HDD without removing internal HDD/SDD from a slim notebook PC. 　

2) Copying contents of the disks of a server PC. Image copies of disks from Unix certified servers and RAID arrays can be created.

3) Copying contents of an unstable HDD.

4) Field works with minimal equipment. Because software is running from CD, it does not require a special system; a common PC on-hand can be used for disk copying.

*Please read the user manual before using MASAMUNE Clone software.*Depending on media condition creation of Clone may be impossible.*Specifications and design of MASAMUNE products may be modified for improvement without prior notice.

■Recommended System 　

　

　　 *USB port is necessary for USB dongle based license key.

(Even if the below conditions are met software may not work due to specific hardware configurations)

Even if OS working from such HDD terminates with errors or usual disk copy operation is difficult, it is possible to create highly accurate physical copy of such HDD by adding command line parameters and adjusting settings.

　　　PC DOS/V compatible or Intel Mac (Macintosh with Intel CPU on board) PC capable of running software from CD-ROM

　　　CPU

　　　Memory 　

　　　Graphic card

　　　Other

Intel Pentium / Celeron, AMD Athlon / Duron or compatible CPU with clock frequency from 1 GHz.

From 512MB

XGA (1024x768) or better

USB port, CD-ROM or DVD drive, keyboard