MASAMUNE Clone Forensic Edition

Reliable software duplicator quickly supporting your work through preservation of evidence for digital forensic investigation.
This is the MASAMUNE Clone Forensic Edition!

Evidence Preservation Tool MASAMUNE Clone Forensic Edition Features

Linux based software running from CD

・Physical reproduction of data on external HDD without removing internal HDD* from PC.

・Can support all interfaces and create physical copies of various electronic recording media.
*HDD: hard disk drive.

Depending on combination of hardware and cables being used, high speed of 42 GB/min (actual measured value) can be achieved.

Proprietary Algorithm (patent pending) reduces the number of read errors

・Can create highly accurate clone disks by storing addresses of skipped bad sectors and unreadable regions and repeating read operations on them.

Can generate electronic signature using content of the log which is encrypted using proprietary algorithm and detects unauthorized log alteration.

Identity verification using hash value

・Can verify identity of data using hash value calculated by hash function.

Source and Target confirmation

・Can protect from misoperations and accidental original overwriting by confirming the connected device (electronic recording media).

MASAMUNE Clone Forensic Edition Algorithm

・Avoids retry operation on sector where read error occurs using proprietary algorithm.

1）Skip Operation (Normal Copy Mode).

　Avoids read error by skipping sectors in the order of their occurrence.

2）Detailed repeated reading of the skipped sectors (Final Copy Mode).

Reliable physical reproducing of the skipped sectors.

What functions are required in an evidence preservation tool?

Complete (physical) reproduction

・Processing of bad sectors (do not skip / terminate with errors).
・Avoidance / reduction of read errors.

Identity verification

・Data identity verification using hash value calculated by hash function and binary comparison of bit strings from copy source and target.

(According to the 3rd edition of the IDF evidence preservation guidelines)

Working log generation

・Detailed information about damaged and recovered data.
・Work results including work content, addresses of unreadable sectors, etc.
・Detect unauthorized log alteration.

【Application examples】

MASAMUNE Clone Forensic Edition can be used in the following cases.

1) Copying contents of the disks of a notebook PC which is hard to dismantle.

Physical reproduction of data on external HDD without removing internal HDD/SDD from a slim notebook PC.

2) Copying contents of the disks of a server PC.

Image copies of disks from Unix certified servers and RAID arrays can be created.

3) Copying contents of an unstable HDD.

Even if OS working from such HDD terminates with errors or usual disk copy operation is difficult, it is possible to create highly accurate physical copy of such HDD by adding command line parameters and adjusting settings.

4) Field works with minimal equipment.

Because software is running from CD, it does not require a special system; a common PC on-hand can be used for disk copying.

Recommended System

(Even if the below conditions are met software may not work due to specific hardware configurations)

*Please read the user manual before using MASAMUNE Clone software.
*Depending on media condition creation of Clone may be impossible.
*Specifications and design of MASAMUNE products may be modified for improvement without prior notice.