Windows Forensic Boot Disk

Windows Forensic Boot Disk
Request a Quote

SAFE Block To Go

SAFE Block To Go creates the next generation forensically sound Windows boot disk. It provides you the absolute best forensic control boot disk in the world, far surpassing the capabilities of any previous Windows PE control boot disk including our previous SAFE boot disk. SAFE Block Win10 To Go is a software-based write blocker designed for the portable Windows 10 To Go Operating System and will not run on versions of Windows other than Windows 10 To Go. SAFE Block Win10 To Go provides for the quick and safe acquisition and/or analysis of any disk or flash storage media installed in or attached directly to any computer you boot with your Windows 10 To Go bootable USB disk.

Unlike all other forensic boot disks, SAFE Block To Go gives you a full portable Windows 10 forensic workstation on a USB drive. SAFE Block To Go adds the industry-recognized software write blocking of SAFE Block to your certified Windows 10 To Go USB disk. You can now boot and safely acquire and/or analyze any Intel/AMD-based device using your SAFE Block To Go drive. This is ideal for devices with drives that are hard (or impossible to remove) such as tablets and notebooks, including write-blocking and imaging of NVMe SSD hard drives. And you can now easily and safely image every RAID, SAS, Fiber Channel and/or laptop hard drive without the need for special adapters, controller cards, or any other hardware device not already present on the machine. In addition, even those drives protected by BitLocker can be accessed and analyzed.


SAFE Block To Go Features

Full Windows 10 Portable Forensic Boot Environment

Leverage your fully licensed Windows 10 operating system to create a portable Windows 10 write-protected forensically sound boot environment.

How Does SAFE Block To Go Compare with the original SAFE?

When ForensicSoft launched SAFE, the first forensically sound boot disk, it was an outstanding tool for its time. But unlike SAFE Block To Go, the original SAFE product line used a cut-down and time-limited version of Windows called Windows PE. Windows PE was light-weight and had support for many devices drivers. SAFE Block To Go is a fully functional Windows 10 environment with access to every Window 10 device driver available in the market. It is literally a Windows 10 forensic workstation on a USB drive. Insert the Windows To Go drive into any USB-equipped device, and boot using SAFE Block To Go and all your forensic tools.

What are the limitations to SAFE Block To Go?

There are no limitations. SAFE Block To Go provides for a full write-blocked Windows 10 operating system. Whatever you can do with your regular Windows 10 forensic workstation, you can do with your new SAFE Block To Go USB drive.

How Do I Create My SAFE Block To Go USB Drive?

There are 3 things you’ll need: 1) A Windows To Go compatible USB drive, 2) The Windows 10 To Go Operating System, and 3) A license to SAFE Block Win10 To Go.

If you already own Windows 10 Enterprise Edition, Windows To Go is included with your license. In Windows 10 Enterprise, simply follow the instructions provided byMicrosoft or go to Control Panel, select “Windows To Go”, insert your Windows To Go compatible USB disk and follow the on-screen instructions. If you do not own Window 10 Enterprise Edition, you can either upgrade or obtain a 90-day evaluation of Windows 10 Enterprise from the Microsoft Evaluation Center. To find a Windows To Go compatible USB drive, review this list. Once you have a running Windows 10 To Go USB disk, you will install SAFE Block Win10 To Go and all of your other forensic software on the Windows 10 To Go USB disk in the exact same manner as you have setup your regular your Windows forensic workstations.

Simple

SAFE Block Win10 To Go is the same simple Windows interface that the regular version of SAFE Block uses, allowing the user the ability to block and un-block any disk or flash storage device detected by Windows. Devices are listed in a tree by type (USB, SCSI, IDE) and, where appropriate, by controller and channel.

Block Multiple Devices

SAFE Block Win10 To Go provides the ability to simultaneously write block as many disk devices as are connected to a computer, without the need for multiple expensive hardware write blocking devices.

Application Independent

SAFE Block Win10 To Go is application independent and works with all forensic acquisition and analysis applications that run on Windows 10.

Used Where Hardware Write Blockers Are Not Possible

SAFE Block Win10 To Go protects the portable Windows 10 To Go Operating System, which is installed on your bootable USB disk. Using your bootable SAFE Block Win10 To Go protected USB disk, you can boot any Intel or AMD based computer and perform data acquisition and/or analysis without the need to remove hard drives. This allows you to forensically image MacBooks and other laptops where removing the hard drive is difficult if not impossible without breaking the device. Additionally, servers that have multiple hard drives attached to a RAID controller can be images as single disks/volumes without the need to remove any hard drives from the server. Unlike, previous Windows PE-based boot disks, there are no OS limitations with a Windows 10 To Go boot disk and drivers are available for just about every device and computer you will come across, including NVMe SSD drives.

Faster Than Hardware

SAFE Block Win10 To Go allows for write-blocked, Windows-based, disk imaging speeds that are up to 10 times faster than imaging in Windows using commercially available hardware-based write blockers. Hardware write blockers use interface bridges, hardware and firmware to write protect media, and in doing so bottleneck your throughput. SAFE Block Win10 To Go provides for full unrestricted I/O throughput with all your controller interfaces for drive to drive imaging with no bottleneck.

Automatic Write Blocking

SAFE Block Win10 To Go provides automatic write blocking of all directly attached disk and flash media, including IDE (PATA and SATA), SSD, NVMe, SCSI, SAS, Fiber Channel, USB, IEEE 1394, card readers (i.e. MS, MS Pro, MS Pro Duo, SD, DHC, MMC, RS MMC, XD, M2, MicroSD, Compact Flash, etc.) and all other mass storage devices. The user controls automatic write blocking policies for fixed and/or removable disks. The user can have SAFE Block Win10 To Go remember the blocked or un-blocked status of fixed and external hard disk media for ease of use on media repeatedly used on a workstation. Remembering of USB devices classified by Windows as “removable media” cannot be “remembered.”
Windows Forensic Boot Disk


Please contact CDFS for more information
1300 55 33 24 | E-mail: contact@cdfs.com.au

2017-09-01T14:51:03+00:00