CRU USB WriteBlocker User Manual

Forensic Software utility
Revised April 15, 2011
Thank you for purchasing a WiebeTech forensic product. Forensic Software Utility is a free software application designed for optional usage with your write-blocker. This application is compatible with Microsoft Windows XP, Vista, and Windows 7. If you have any difficulty using this application, WiebeTech offers toll-free phone support at 1-866-744-8722, or email support at
support@wiebetech.com.
Table of Contents
1. Requirements
2. Installing WiebeTech Forensic Software Utility
2.1 Windows Installation
3. Using WiebeTech Forensic Software Utility
3.1 Drive Info Tab
3.1.1 Date/Time 3
3.1.2 Dock ID 3
3.1.3 Model Number 3
3.1.4 Serial Number 3
3.1.5 Revision 3
3.1.6 Capacity 3
3.2 Dock Info Tab
3.2.1 1394 Vendor ID 3
3.2.2 USB Vendor ID 3
3.2.3 USB Product ID 3
3.2.4 Manufacturer 3
3.2.5 Product 3
3.2.6 Serial Number 3
3.2.7 Revision 3
3.3 HPA/DCO Behavior Tab
3.3.1 Mode #1 4
3.3.2 Mode #2 4
3.3.3 Mode #3 4
3.3.4 Mode #4 4
3.4 Exit/Rescan/Save Info Buttons
3.4.1 Exit 5
3.4.2 Rescan 5
3.4.3 Save Info 5
3.5 Firmware Updates
4. Features by Connection Type
5. Frequently Asked Questions
6. License Agreement
2 2 2 2 3
3
4
5
5 6 6 7
U s e r M a n u al fo r F or e ns i c S o f t w a r e U t il i t y ( A9 -0 0 0 - 0 0 1 3 ) R E V 1 . 2
- 1 -
CRU-WiebeTech
1. Requirements
Operating System: Windows XP (32-bit), Vista (32- or 64-bit), Windows 7 (32- or 64-bit)
Connections: USB, FireWire (1394a or 1394b), eSATA
Products: WiebeTech USB WriteBlocker, Forensic UltraDock, Forensic LabDock, and Forensic RTX
models
2. Installing Forensic Software Utility
Forensic Software utility can be found on the WiebeTech website (http://www.wiebetech.com/software/Forensic_Software_Utility.php).
2.1 Windows Installation
After you’ve double-clicked the Forensic Software Utility install file, a Setup Wizard will appear on your screen. Click “Next”. After you click “Next” it will take you to a licensed agreement for installing this software. Read over the agreement and select “I accept the agreement”, then click “Next”. The Setup Wizard will automatically create folders for Forensic Software Utility. If you would like to install it in a different folder on your system that’s acceptable, just click “Browse” and select a new location. Once you’ve decided on where to store the software click “Next”. Shortcuts will automatically be installed in the Start Menu under a subfolder called WiebeTech. Again, if you’d like to install this in a different area select “Browse” and choose a different location. After you’ve decided on where to store the program’s shortcuts click “Next”. Then you can opt to have a desktop icon installed. Make your selection and click “Next”. After that, the wizard will prompt you to install the software and will give a brief recap of the different selections you made. Click “Install” and let the wizard complete your installation. Finally, you can choose to launch the Utility. Click “Finish” and open up Forensic Software Utility.
3. Using Forensic Software Utility
When you open WiebeTech Forensic Software Utility, it will perform an initial scan for WiebeTech forensic devices.
Do not unplug any devices while the utility is scanning.
If the scan does not locate a device, click the rescan button.
When the scan is finished and the WiebeTech forensic device is detected, Forensic Software Utility is ready for use. You can view and capture information regarding the WiebeTech Forensic product, the drive attached to the forensic product, and any HPA and/or DCO regions found on the attached drive.
U s e r M an u a l f or F or e ns i c S o f t w a r e U t il i ty ( A9 -0 0 0 - 0 0 1 3) RE V 1 . 2
- 2 -
CRU-WiebeTech
3.1 “Drive Info” Tab
This tab allows you to capture identification information related to the “suspect drive” that is attached to the WiebeTech Forensic Product.
3.1.1 Date/Time
This field displays the date and time that Forensic Software Utility is accessed.
3.1.2 Dock ID
This field shows which WiebeTech Forensic Product is connected.
3.1.3 Model Number
This indicates the Model Number of the attached drive.
3.1.4 Serial Number
This reports the Serial Number of the attached drive.
3.1.5 Revision
This field displays the firmware of the attached drive.
3.1.6 Capacity
Size of the drive (in bytes).
3.2 “Dock Info” Tab
This tab allows you to obtain identification information related to the WiebeTech Forensic product itself.
(Requires USB, FireWire, or eSATA connection)
(Requires USB or FireWire connection)
3.2.1 1394 Vendor ID
Vendor ID of the FireWire
3.2.2 USB Vendor ID
Vendor ID of the USB
3.2.3 USB Product ID
Product ID of the USB
3.2.4 Manufacturer
Maker of the forensic device
3.2.5 Product
Specific name of the WiebeTech forensic device
3.2.6 Serial Number Serial number of the WiebeTech forensic device
3.2.7 Revision
Current firmware version on the WiebeTech forensic device
U s e r M an u a l f or F or e ns i c S o f t w a r e U t il i ty ( A9 -0 0 0 - 0 0 1 3) RE V 1 . 2
- 3 -
Loading...
+ 4 hidden pages