background image

Tableau TD2u

The Tableau TD2u is a forensic duplicator capable of performing 1:1, 1:2, and 1:3 duplications.
It has many of the functions traditionally found in general-purpose, IT-oriented hard disk
duplicators and provides features and functions that serve the specialized needs of forensic
practice, including:

l

Sustained data transfer rates of up to 16 GB/minute, while performing calculations of
MD5 and SHA-1 hash values, also known as fingerprints.

l

Native support for USB 3.0, SATA and IDE hard disks from the source interface.

l

Parallel duplication to two SATA and one USB 3.0 destination hard disks.

l

Parallel image and clone duplication.

l

Optional destination disk encryption to ensure security of imaged source data.

l

Detailed log generation for case documentation.

l

Automatic blank checking of source and destination drives.

l

HPA and DCO support for the detection and handling of hidden/protected data areas on
source and destination drives.

l

Multi-lingual support for the UI and character input.

TD2u Kit Contents

The TD2u ships in a boxed kit that includes the following:

Item

Model #

Description

TD2u

TD2u Forensic Duplicator

CHAPTER 1  Overview

11

Содержание TD2u

Страница 1: ...USER GUIDE Tableau TD2u Version 1 3...

Страница 2: ...e Any use and duplication of this work is subject to the terms of the license agreement between you and Guidance Software Inc Except as stated in the license agreement or as otherwise permitted under...

Страница 3: ...ER 1 Overview 9 Tableau TD2u 11 TD2u Kit Contents 11 Navigating the TD2u 14 Reading the LEDs 15 USB Keyboard Support 15 CHAPTER 2 Setting up the TD2u 17 Startup Sequence 19 Initialization 19 Configuri...

Страница 4: ...tions Checking 38 Wipe Disk Menu 2 41 Single Pass Wipe 42 Multi Pass Wipe 42 Secure Erase 42 Encryption Menu 3 43 Encrypt New Destination Menu 3 1 43 Unlock Destinations Menu 3 2 44 Change Dest Passwo...

Страница 5: ...oubleshooting and Support 59 Troubleshooting Common Problems 61 Power Supply Issues 61 Problems with Disk Detection 61 Problems with Encrypted Drives 63 Replacing the Backup Battery for the Real time...

Страница 6: ...vi...

Страница 7: ...u Conventions Used in this Guide The TD2u has two soft keys placed immediately under the LCD display The bottom line of the display shows text indicating the current function for each of the two soft...

Страница 8: ...GB hard disk stores up to 4 000 000 000 bytes a hard disk with a 150 MB sec transfer rate transfers 150 000 000 bytes per second Note For a complete list of changes for a given TD2u firmware release s...

Страница 9: ...CHAPTER 1 OVERVIEW Tableau TD2u 11 TD2u Kit Contents 11 Navigating the TD2u 14 Reading the LEDs 15 USB Keyboard Support 15...

Страница 10: ...10 Tableau TD2u User Guide Version 1 3 0...

Страница 11: ...SATA and IDE hard disks from the source interface l Parallel duplication to two SATA and one USB 3 0 destination hard disks l Parallel image and clone duplication l Optional destination disk encrypti...

Страница 12: ...tages worldwide TP5 LC US North America shipments include the TP5 LC US AC line cord for use with the TP5 NC power supply When shipped to other geographic markets the local reseller typically adds an...

Страница 13: ...8 IDE cable to connect notebook drive adapters to the TD2u Use the shorter TC6 2 IDE cable shown with the TKA5 AD adapter pack below TC8 USB 2 0 cable Used to con nect the TD2u to a host com puter for...

Страница 14: ...e soft keys might also serve to select items like Cancel and Ok The center button on the arrow keypad also serves as a Select button when navigating among TD2u menus It cannot be used to start major t...

Страница 15: ...the destination drives are connected to the right side A yellow Alert LED on the right flashes to indicate the need for user intervention USB Keyboard Support You can connect a standard USB keyboard...

Страница 16: ...16 Tableau TD2u User Guide Version 1 3 0...

Страница 17: ...itialization 19 Configuring the TD2u 19 User Selected Startup Mode 19 System Settings Menu 7 1 20 Set Examiner Name Menu 7 1 2 21 Imaging Setup Menu 7 2 22 Factory Reset Menu 7 3 26 Duplicator Info Me...

Страница 18: ...18 Tableau TD2u User Guide Version 1 3 0...

Страница 19: ...mode The TD2u stores these settings in non volatile flash memory for use at each startup The startup mode feature lets you customize the TD2u for a specific workflow The Startup Mode setting provides...

Страница 20: ...r Name Alphanumeric NA The Examiner Name option lets you set or change the name of the examiner or user of the TD2u This information appears in each log recor ded by the TD2u Alphabetic names can be e...

Страница 21: ...row keys to change the value in each field Once you have set the desired date and time press the Save soft key to record your changes Finished Alert Off On Off When On the TD2u flashes the yellow Aler...

Страница 22: ...e display capital letters is selected For capital letters lowercase letters and numbers use the Up and Down buttons to scroll through characters Press the center button on the keypad to select a chara...

Страница 23: ...e a Raw DD file or if the user should be prompted at exe cution time File Size 4GB 2GB 1GB 700MB UNLIMITED 2GB Size of an individual image file generated during Disk to File duplication operation E01...

Страница 24: ...p When set to Prompt the TD2u prompts the user to enter Case Notes When set to Skip Case Notes are suppressed in subsequent logs Error Recov ery Standard Exhaustive Standard The TD2u supports two diff...

Страница 25: ...inal pass of random data For some SATA solid state destinations Secure Erase is a very fast wipe provided by the drive manufacturer Restore to Defaults N A N A Resets the above options to the factory...

Страница 26: ...hashes for the duplication The TD2u treats all media errors on a destination disk as fatal or unrecoverable errors because each destination disk is receiving a copy of evidence critical to a forensic...

Страница 27: ...Build Time 14 31 22 The build time of the TD2u firmware release Build Date Nov 28 2017 The build data of the TD2u firmware release Connecting Hard Drives Viewing the front of the TD2u the source driv...

Страница 28: ...Tableau TCUSB3 18 cable 3 Connect the source disk with its power cable to the left side TD2u power input o TC2 8 R2 IDE SATA drive power cable o TC5 8 R2 SATA drive power cable 4 Connect the destinati...

Страница 29: ...on SATA disks to the TD2u The TD2u can write to two destination drives simultaneously To create a single copy connect a drive to either the Dest 1 or USB destination port Drive Detection After initial...

Страница 30: ...30 Tableau TD2u User Guide Version 1 3 0...

Страница 31: ...d Options 33 Duplicate Menu 1 36 Preconditions Checking 38 Wipe Disk Menu 2 41 Encryption Menu 3 43 Disk Information Menu 4 45 Disk Utilities Menu 5 47 Status Information 50 Logs Menu Menu 6 52 Resett...

Страница 32: ...32 Tableau TD2u User Guide Version 1 3 0...

Страница 33: ...of the tree is numbered to guide you as you navigate the menu tree These numbers also make it easy to refer back to this guide for detailed information The following outline provides the menu structur...

Страница 34: ...lities 5 1 Format 5 1 1 Format Destination 5 1 2 Format Accessory 5 2 Hash 5 3 Blank Check 5 4 HPA DCO Removal 6 Logs 6 1 View Logs 6 2 Save All Logs 6 3 Delete All Logs 6 4 Print All Logs 34 Tableau...

Страница 35: ...ging Setup 7 2 1 File Type 7 2 2 File Size 7 2 3 E01 EX01 Compression 7 2 4 Directory Name 7 2 5 Custom Filename 7 2 6 Raw File Ext 7 2 7 Case ID 7 2 8 Case Notes 7 2 0 Error Recovery 7 2 10 Error Ret...

Страница 36: ...distinct sub menus Selecting the Duplicate item will launch a Duplicate job setup page that allows for in line selection of clone or image for all connected destination drives This allows each destin...

Страница 37: ...detailed information press the Details soft key The TD2u provides a high degree of flexibility in selecting defaults for each field so that you can configure the TD2u to match your desired workflow De...

Страница 38: ...e option and may also be specified under the Setup Imaging Options menu When creating a DD image you can also specify DMG naming for files DMG refers to a file naming convention used by Apple operatin...

Страница 39: ...using the Disk Util ities option under the Main menu Source Fits into Destin ation Both Fatal Warning For Clone destinations the destination disk must be at least as large as the source disk For Image...

Страница 40: ...s not mean that the source is neces sarily blank but it could mean that the source has been partially wiped or that an ATA password has been set for the source drive Destination Blank Clone Warning Th...

Страница 41: ...at one during duplication If the destination disk appears to be blank the TD2u formats it without any warnings Encrypted Destinations Unlocked Both Warning The TD2u checks if any of the destinations a...

Страница 42: ...larger or slower disks Single Pass Wipe The TD2u writes a constant pattern of zeros 00h to the destination drive in a single pass The TD2u will display on screen performance and timing metrics during...

Страница 43: ...source program VeraCrypt can read disks encrypted by TD2u However drives encrypted first by VeraCrypt likely cannot be used by TD2u without re encryption See the Guidance Software website for more inf...

Страница 44: ...tly lost See the Guidance Software website for more information on the methods and algorithms used for TD2u encryption Securely encrypting destinations takes 15 to 20 seconds Unlock Destinations Menu...

Страница 45: ...oes not change the encryption across the drive Generating a new secure header takes 15 to 20 seconds Disk Information Menu 4 The TD2u can display detailed information about the source or the destinati...

Страница 46: ...patible with the Unlock Drive feature nor with most third party tools like VeraCrypt See Troubleshooting Common Problems on page 61 for additional details on how to recover previously encrypted data f...

Страница 47: ...pro tect the contents of the hard disk Disk Utilities Menu 5 The TD2u offers several utilities to assist with the processing of drives These utilities can be found in Menu 5 Format Menu 5 1 When using...

Страница 48: ...y write cycles can severely degrade performance The TD2u recognizes AF disks It formats them accordingly with partitions and clusters positioned at sector locations that are a multiple of 8 Format Des...

Страница 49: ...he Hash Utilities you should get the same hash results When the hashing operation is finished the TD2u screen displays the hash results Blank Check Menu 5 3 The Blank Check menu lets you do a quick bl...

Страница 50: ...he source side of the duplicator It is not however possible to disable DCO without making a permanent modification to the hard disk For this reason the TD2u will not automatically disable DCO on the s...

Страница 51: ...s per second minute Current Rate xxx MB unit The average transfer rate over the last five seconds Elapsed Time Elapsed Time min sec Total elapsed time since the start of the current task Time Remainin...

Страница 52: ...ates a log entry to record that operation The TD2u has an internal flash memory with the capacity to store approximately 59 of the most recently logged operations Once the TD2u has stored 59 log entri...

Страница 53: ...of the line is a symbol indicating the result of the logged operation Result Definition Task completed normally Task did not completely normally Task canceled Sample TD2u Log The TD2u maintains detail...

Страница 54: ...apacity in Bytes 2 000 398 934 016 2 0 TB Block Size 512 bytes Block Count 3 907 029 168 Power ON Block Count 3 907 029 168 HPA In Use No HPA Block Count 3 907 029 168 DCO In Use No DCO Block Count 3...

Страница 55: ...gs option to save the logs Logs are saved in an ASCII text format Use any text editor to view the logs Writing Logs to a USB Storage Device The TD2u lets you write logs to a USB storage device and adh...

Страница 56: ...non volatile memory is a separate flash device used to store two different types of information configuration settings and logs Configuration settings include the following l User operator name entere...

Страница 57: ...wing table lists the reset clear information stored internally by the TD2u Non Volatile Memory Information Stored User or Case Spe cific Info Ability to Reset Clear Flash 1 TD2u firmware None Firmware...

Страница 58: ...Setup Case Info Options TD2u logs User specific and Case specific All logs can be erased by either select ing Logs Erase Logs or Setup Fact ory Reset Alternately logs can be erased individually When v...

Страница 59: ...CHAPTER 4 TROUBLESHOOTING AND SUPPORT Troubleshooting Common Problems 61 Replacing the Backup Battery for the Real time Clock 64...

Страница 60: ...60 Tableau TD2u User Guide Version 1 3 0...

Страница 61: ...ctor If the TP5 power supply is connected properly to the TD2u and to AC power the green LED illuminates If you are having difficulty turning the TD2u on check the status of the DC power LED to ensure...

Страница 62: ...ted to the notebook drive adapter TD2u does not detect ZIF style notebook IDE hard disk There are several models of ZIF hard disks When using the TDA5 ZIF kit provided with the TD2u refer to the Suppo...

Страница 63: ...firmware includes a Legacy Unlock feature If you have such a drive the following procedure will allow for recapture of the previous evidence 1 Update your TD2u to version 1 3 or newer 2 Connect the e...

Страница 64: ...Model Duracell DL1220 Energizer CR1220 Rayovac CR1220 Replacing the Battery It is necessary to open the TD2u case in order to replace the battery You need a 1 Phillips screwdriver to open the TD2u cas...

Страница 65: ...f the case when the bottom is removed 5 The fan used in the TD2u is attached to the lower half of the plastic case Carefully lift the lower half of the case away from you 6 Set the TD2u on a flat surf...

Страница 66: ...The backup battery is near the heatsink as shown in the photograph below 7 Using the flat blade screwdriver gently pry the battery from the battery holder 66 Tableau TD2u User Guide Version 1 3 0...

Страница 67: ...CB o Ensure that the case and main circuit board are aligned and replace the four case screws The four screws that hold the TD2u case together also secure the main cir cuit board o After replacing the...

Страница 68: ...detailed information about setting the date and time see System Settings Menu 7 1 on page 20 After resetting the date time turn the TD2u off wait two minutes and turn the TD2u on The date time locate...

Страница 69: ...ment Con ventions 7 Disk Information Menu 4 45 Disk Utilities Menu 5 47 Drive Detection 29 Duplicate 36 Duplicator Info Menu 8 26 E EnScript 2 Error Recovery Modes 25 F Factory Reset Menu 7 3 26 Forma...

Страница 70: ...the Real time Clock 64 Replacing the Battery 64 Resetting and Clearing Internally Stored Information 56 S Sample TD2u Log 53 Save All Logs Menu 6 2 55 Secure Erase 42 Set Examiner Name Menu 7 1 2 21 S...

Страница 71: ...U USB Keyboard Support 15 User Selected Startup Mode 19 Using the TD2u 31 V View Logs Menu 5 1 52 W Wipe Disk Menu 2 41 Writing Logs to a USB Storage Device 55...

Отзывы: