USER GUIDE - forensiccomputers.com

1 Volume 1 FORENSIC COMPUTERS, INC. Ultimate Forensic Write Protection Kit II user GUIDEFORENSIC COMPUTERS, INC. Forensic Write Protection GUIDE 2008 Forensic Computers, Inc. 110 Forensic Lane, Glen Lyn, VA 24093 Phone Fax Tableau Product Images and Technical Data courtesy of Tableau, LLC 2003-2008 Tableau, LLC Tableau is a registered trademark of Tableau, LLC. Table of Contents CHAPTER 1 TABLEAU WRITE PROTECTION BRIDGES 3 About the Innovation Family 3 About the Classic Bridge Family 3 CONTENTS 3 Tableau T35e READ ONLY Forensic Bridge 4 Tableau T35e READ/WRITE Forensic Bridge 4 Tableau T4 Forensic Bridge 4 Tableau T8 Forensic Bridge 4 Tableau SCSI Ribbon Cable 4 Tableau IDE Ribbon Cable 5 50-pin SCSI Single Position Flat Ribbon Cable 5 P9-P9 FireWire Cable 5 Mini Type B USB Cable 5 8 Red SATA Flat Cable 5 Female to Female Molex Power Cables (6 or 12 )

2 5 SATA 15-pin to Female Molex Power Cable 6 6 USB Extension Cable 6 50-pin Male/68-pin Female SCSI Adapter 6 P6 Adapters 6 P4 Adapters 6 HP68 to SCA-80 Adapter with Instructions 6 Tableau IDE Notebook Adapter 7 Tableau IDE Notebook Adapter 7 Tableau TDA5-ZIF IDE Hard Disk Adapter 7 Tableau TP2 Power Bricks 7 PC Power Cords 8 Tableau TDA8-M Media Card Reader 8 CHAPTER 2 T35E SATA/IDE BRIDGE CONNECTION PROCEDURE (SATA) 9 Items Needed 9 T35E SATA/IDE BRIDGE CONNECTION PROCEDURE (IDE) 11 Items Needed 11 CHAPTER 3 T4 FORENSIC SCSI BRIDGE CONNECTION PROCEDURE 14 Items Needed 14 CHAPTER 4 T8 FORENSIC USB BRIDGE CONNECTION PROCEDURE 17 Items Needed 18 APPENDIX A CONFIGURATION SWITCHES 19 APPENDIX B REMOVAL PROCEDURES 21 APPENDIX C DAISY-CHAINING FORENSIC BRIDGES

3 22 Daisy Chain Example 22 APPENDIX D HOT-SWAPPING DRIVES 24 APPENDIX E OTHER TIPS & INFORMATION 25 NOTES 28 Chapter 1 Ultimate Forensic Write Protection Kit II he Ultimate Forensic Write Protection Kit II does it ALL for the following media types: IDE, IDE Notebook, SATA, SCSI(50-pin, 68-pin, and SCA-80), PLUS seven varieties of flash media.

4 The Ultimate Forensic Write Protection Kit comes packaged in the targus Laptop Bag. Individual items of the Ultimate Write Protection Kit- are listed in the sections after the diagram. T Tableau Write Protection Bridges The Ultimate Forensic Write Protection Kit Lab II includes the following families of bridges: Innovation (T8 USB), Classic (T35e SATA/IDE, T4 SCSI). About the Innovation Family The Innovation Family of forensic bridges has the ergonomics and reliable operation of other Tableau forensic bridge products and the innovative use of an integrated LCD interface.

5 About the Classic Bridge Family Tableau s Classic Family of forensic bridges (aka write-blockers) sets the standard by which all write-blockers are measured. Easy-to-use, highly reliable with high performance, the classic family is used for field and lab acquisition of data. The Classic family was designed for the following I/O interfaces: IDE, SATA and SCSI. Contents In the Ultimate Forensic Write Protection Kit II, there are six categories of items: Forensic Bridges, Cables, Adapters, Power Assembly, Media Reader and Carrier Case. 3 Tableau T35e READ ONLY Forensic Bridge The Tableau T35e can be used to connect to FireWire400, FireWire800, USB and devices to extract data from another computer.

6 The T35e has a SATA, IDE and a power connection on its right side. (PN: T35e) Tableau T35e READ/WRITE Forensic Bridge The Tableau T35e-RW can be used to connect to FireWire400, FireWire800, USB and devices to extract data from another computer. The T35e-RW has a SATA, IDE and a power connection on its right side. (PN: T35e-RW) Tableau T4 Forensic Bridge The Tableau T4 Forensic Bridge is a write-blocker for use with SCSI (Small Computer Systems Interface) hard disks. The T4 is identifiable from the T3u or the T35e by the SCSI port located on its right side.

7 (PN: T4) Tableau T8 Forensic Bridge The Tableau T8 USB Forensic bridge works with mass storage devices like USB thumb drives, external USB hard drives, Apple iPOD's that have USB interfaces, and even USB-based cameras with card-reader capability. (PN: T8) Tableau SCSI Ribbon Cable The TC10-8 SCSI ribbon cable is a high-quality, 68-conductor SCSI cable with standard high-density 68-pin SCSI connectors at each end. There are pull tabs at each end to make the cable more rugged. (PN: TC10-8) 4 Tableau IDE Ribbon Cable The TC6-8 IDE ribbon cable is a high-quality, 80-conductor IDE cable with standard high-density 40-pin IDE connectors at each end.

8 There are pull tabs at each end to make the cable more rugged. (PN: TC6-8) 50-pin SCSI Single Position Flat Ribbon Cable P9-P9 FireWire Cable The P9-P9 FireWire cable is a six feet in length. The P9 stands for the nine parallel wires inside of the cable. FireWire400 uses P4 or P6 connectors that have four or six parallel wires inside of the cable. Mini Type B USB Cable The Mini Type B to USB cable has a type A connector on one end and a type B mini USB connector on the other end. 8 Red SATA Flat Cable The eight inch SATA cable is a standard SATA signal cable for use with the Tableau T3u SATA Bridge or the T35e SATA/IDE Bridge.

9 (PN: TC3-8) Female to Female Molex Power Cables (6 or 12 ) The TC2-8 or female to female Molex power cable is designed to conduct power from a Tableau T3u, T35e, T4, or T5 forensic bridge to a subject hard drive. (PN: TC2-8) 5 SATA 15-pin to Female Molex Power Cable The TC5-8 or SATA 15-pin to female Molex cable is an eight inch power cable with a 4-pin female Molex connector on one end (white) and a 15-pin SATA style power connector at the other end (black). The TC5-8 is intended to conduct power from a Tableau T3u or a Tableau T35e to a subject SATA hard drive.

10 (PN: TC5-8) 6 USB Extension Cable The 6 USB Extension Cable is a type A Male to Female USB extension cable, allowing one to extend an existing USB connection. 50-pin Male/68-pin Female SCSI Adapter The 50-pin Male to 68-pin Female SCSI adapter converts a 50-pin SCSI cable to a 68-pin Female connection. P6 Adapters The P6 Fire Wire adapters are used to convert FireWire800 P9 cables to a FireWire400 P6 connection. (PN: TCA7-6-9) P4 Adapters The P4 FireWire adapters are used to convert FireWire800 P9 cables to a FireWire400 P4 connection. (PN: TCA7-4-9) HP68 to SCA-80 Adapter with Instructions The HP68 to SCA-80 Adapter converts a 68-pin SCSI connection to a SCA-80 SCSI connection.