SAFE Block To Go creates the next generation forensically sound Windows boot disk. It provides you the absolute best forensic control boot disk in the world, far surpassing the capabilities of any previous Windows PE control boot disk including our previous SAFE boot disk. SAFE Block Win10 To Go is a software-based write blocker designed for the portable Windows 10 To Go Operating System and will not run on versions of Windows other than Windows 10 To Go. SAFE Block Win10 To Go provides for the quick and safe acquisition and/or analysis of any disk or flash storage media installed in or attached directly to any computer you boot with your Windows 10 To Go bootable USB disk.
Unlike all other forensic boot disks, SAFE Block To Go gives you a full portable Windows 10 forensic workstation on a USB drive. SAFE Block To Go adds the industry-recognized software write blocking of SAFE Block to your certified Windows 10 To Go USB disk. You can now boot and safely acquire and/or analyze any Intel/AMD-based device using your SAFE Block To Go drive. This is ideal for devices with drives that are hard (or impossible to remove) such as tablets and notebooks, including write-blocking and imaging of NVMe SSD hard drives. And you can now easily and safely image every RAID, SAS, Fiber Channel and/or laptop hard drive without the need for special adapters, controller cards, or any other hardware device not already present on the machine. In addition, even those drives protected by BitLocker can be accessed and analyzed.
Full Windows 10 Portable Forensic Boot Environment
Leverage your fully licensed Windows 10 operating system to create a portable Windows 10 write-protected forensically sound boot environment.
How Does SAFE Block To Go Compare with the original SAFE?
When ForensicSoft launched SAFE, the first forensically sound boot disk, it was an outstanding tool for its time. But unlike SAFE Block To Go, the original SAFE product line used a cut-down and time-limited version of Windows called Windows PE. Windows PE was light-weight and had support for many devices drivers. SAFE Block To Go is a fully functional Windows 10 environment with access to every Window 10 device driver available in the market. It is literally a Windows 10 forensic workstation on a USB drive. Insert the Windows To Go drive into any USB-equipped device, and boot using SAFE Block To Go and all your forensic tools.
What are the limitations to SAFE Block To Go?
There are no limitations. SAFE Block To Go provides for a full write-blocked Windows 10 operating system. Whatever you can do with your regular Windows 10 forensic workstation, you can do with your new SAFE Block To Go USB drive.
How Do I Create My SAFE Block To Go USB Drive?
There are 3 things you’ll need: 1) A Windows To Go compatible USB drive*, 2) Install disk or ISO of the Windows 10 Operating System version of your choice (Enterprise LTSB recommended), and 3) A license to SAFE Block Win10 To Go.
For the easiest and quickest deployment of Windows To Go, try out our Powershell scripts provided on our Support Page!
The Windows To Go Creation Wizard is now available in Control Panel in most versions of Windows. Simply follow the instructions provided by Microsoft or go to Control Panel, select “Windows To Go”, insert your Windows To Go compatible USB disk and follow the on-screen instructions. If you do not own Window 10 Enterprise Edition, you can either upgrade or obtain a 90-day evaluation of Windows 10 Enterprise from the Microsoft Evaluation Center. To find a Windows To Go compatible USB drive, review this list. Once you have a running Windows 10 To Go USB disk, you will install SAFE Block Win10 To Go and all of your other forensic software on the Windows 10 To Go USB disk in the exact same manner as you have setup your regular your Windows forensic workstations.
* We recommend a 64GB Windows To Go USB drive or larger to ensure you have room for the OS and all of your standard forensic tools.
Where can I find information about Windows 10 To Go compatible USB drives?
Please visit this page to learn more about Microsoft Windows 10 To Go compatible USB drives.
SAFE Block Win10 To Go is the same simple Windows interface that the regular version of SAFE Block uses, allowing the user the ability to block and un-block any disk or flash storage device detected by Windows. Devices are listed in a tree by type (USB, SCSI, IDE) and, where appropriate, by controller and channel.
Block Multiple Devices
SAFE Block Win10 To Go provides the ability to simultaneously write block as many disk devices as are connected to a computer, without the need for multiple expensive hardware write blocking devices.
SAFE Block Win10 To Go is application independent and works with all forensic acquisition and analysis applications that run on Windows 10.
Used Where Hardware Write Blockers Are Not Possible
SAFE Block Win10 To Go protects the portable Windows 10 To Go Operating System, which is installed on your bootable USB disk. Using your bootable SAFE Block Win10 To Go protected USB disk, you can boot any Intel or AMD based computer and perform data acquisition and/or analysis without the need to remove hard drives. This allows you to forensically image MacBooks and other laptops where removing the hard drive is difficult if not impossible without breaking the device. Additionally, servers that have multiple hard drives attached to a RAID controller can be imaged as single disks/volumes without the need to remove any hard drives from the server. Unlike, previous Windows PE-based boot disks, there are no OS limitations with a Windows 10 To Go boot disk and drivers are available for just about every device and computer you will come across, including NVMe SSD drives.
Faster Than Hardware
SAFE Block Win10 To Go allows for write-blocked, Windows-based, disk imaging speeds that are up to 10 times faster than imaging in Windows using commercially available hardware-based write blockers. Hardware write blockers use interface bridges, hardware and firmware to write protect media, and in doing so bottleneck your throughput. SAFE Block Win10 To Go provides for full unrestricted I/O throughput with all your controller interfaces for drive to drive imaging with no bottleneck.
Automatic Write Blocking
SAFE Block Win10 To Go provides automatic write blocking of all directly attached disk and flash media, including IDE (PATA and SATA), SSD, NVMe, SCSI, SAS, Fiber Channel, USB, IEEE 1394, card readers (i.e. MS, MS Pro, MS Pro Duo, SD, DHC, MMC, RS MMC, XD, M2, MicroSD, Compact Flash, etc.) and all other mass storage devices. The user controls automatic write blocking policies for fixed and/or removable disks. The user can have SAFE Block Win10 To Go remember the blocked or un-blocked status of fixed and external hard disk media for ease of use on media repeatedly used on a workstation. Remembering of USB devices classified by Windows as “removable media” cannot be “remembered.”
Please note: ForensicSoft supports all versions of Windows 10 versions 1709 and earlier.
For all Windows 10 forensic workstations and Windows 10 To Go installations, ForensicSoft highly recommends the clean version of Windows for special purpose (i.e. forensic) computers, called Windows 10 LTSB. If you are unfamiliar with Windows 10 LTSB, you can find more information here.