Summary of Contents for Mediaimager GM4 Basic
- Page 1 Users’ Guide Version 1.7 Mediarecovery Nowogrodzka 56A 00-695 Warszawa, Poland +48 22 719 97 00 office@mediaimager.com Technical Support: Phone: +48 22 719 97 00 E-Mail: office@Mediaimager.com Home Page: http://www.mediaimager.com...
-
Page 2: Table Of Contents
Open Case ............................21 Connecting drives ..........................21 Duplication ............................22 Mediaimager allows to create multiple type of a disk images, such as: ........22 Disk to disk (cloning 1:1) ....................... 22 Disk to disk (cloning 1:1) with marker ..................26 Disk to file ............................. - Page 3 ..........................62 Are there any software updates for MI? If so, how could I know there is one........ 63 Is the set of adapters only available in the SuperKIT version of MediaImager? Can I buy it separately? ............................63 Is my language supported? .......................
-
Page 4: About Mediarecovery
Mediarecovery specialists, based on many years of experience, have designed a series of data duplicators – Mediaimager. For several years, the company has been a manufacturer of equipment for irreversible data erasure – Mediaeraser. At the beginning of 2015 Mediarecovery launched another model of degausser –... -
Page 5: About This Guide
IT security experts and lawyers who specialize in new technologies. About this Guide This guide is designed to assist users when working on the Mediaimager device. It consists of technical specification of the Mediaimager, its features, interface and functionality information. -
Page 6: Mediaimager
Mediaimager Mediaimager is a powerful forensic duplicator that allows making binary copies of media storage in a fast and safe way, capable of making 2 copies simultaneously in the Basic version, up to even 6 copies in the same time in the Pro and SuperKIT versions. - Page 7 10’’ colour touch screen user interface making its usage easy and comfortable. Highly secure environment – capability to encrypt the binary copy (AES256). 100% of Mediaimager software is created by Mediarecovery specialists. Parts used to assembly the device are the highest quality. ...
-
Page 8: Kit Contents
Kit contents Mediaimager SuperKIT is the highest of all three duplicator versions and it comes together with: Power supply + power cord Mediaimager duplicator SATA/SAS cable x 4 Case pack Set of adapters Expansion cable MEDIAIMAGER – Users’ Guide, Version 1.7... -
Page 9: The Features And Capabilities
Restore function. Browsing the files structure (FAT, NTFS). Reporting and logging function for all activities. o Different report formats (PDF) o Export option HDD S.M.A.R.T. Analysis. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 9 of 63... -
Page 10: List Of Accessories Included In Mediaimager Superkit
Adapters and accessories (listed below - pictorial images, the supplied adapters may look a bit different). List of accessories included in Mediaimager SuperKIT UX21, UX31, UX31, Adata, Sandisk XM11 SSD to SATA adapter X1 Carbon Ultrabook SSD to SATA adapter... - Page 11 ATA 3,5" to SATA adapter ATA 2,5" to SATA adapter 1,8” ATA Adapter SATA 29P Male to Male Cable z bezpiecznymi śrubkami LIF HDD to SATA adapter ZIF HDD to SATA adapter MEDIAIMAGER – Users’ Guide, Version 1.7 Page 11 of 63...
- Page 12 Adapter M.2 (NGFF) to SATA Lenovo Yoga to SATA Adapter USB HUB mSATA to SATA Adapter Multi Card Reader USB 3.0 Adapter SATA to USB 3.0 MEDIAIMAGER – Users’ Guide, Version 1.7 Page 12 of 63...
-
Page 13: Technical Specifications
Voltage: 12V @ 15A. • Output voltage: 5V @ 5A, 12V @ 4A. • Dimensions: 276 x 202 x 103 mm. • Weight: 4 kg. • Operating Temperature: 5 - 50 ° C. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 13 of 63... -
Page 14: Setting Up The Mediaimager
Just under the power button, there is DC Power In connector, which for the extra security of the device and evidence material, has the ability to fasten the cable to the device to minimize the possibility of disconnecting power while working on the device. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 14 of 63... - Page 15 These has been clearly marked as SOURCE Ports ( with number from 1 to 4) according to their markings in the Mediaimager software on the device as well as, has been separated and marked as USB 3.0 and SATA/SATA ports.
- Page 16 These has been clearly marked as TARGET Ports ( with number from 1 to 4) according to their markings in the MediaImager software on the device as well as, has been separated and marked as USB 3.0 and SATA/SATA ports.
- Page 17 2 x TARGET SAS / SATA – Target 5 and Target 6 In order to use the Mediaimager forensic duplicator, the machine should be placed on a flat surface with a Power adapter connected to the Power-In port, located in the front of the device. Once the power adapter is plugged in, make sure the ring around it is correctly turned.
-
Page 18: Using The Mediaimager
Home Screen Upon successful login, Home screen will be displayed to the user. Main screen is divided into three parts: Left panel - provides access to all device functions. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 18 of 63... - Page 19 Tiles – allow quick access to all functions of the Mediaimager directly from the Home screen. Top taskbar – contains information like time and date, logs, running processes and case info. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 19 of 63...
-
Page 20: New Case
The above details will appear in logs and reports of created cases. Virtual keyboard will appear upon click in order to input the data. Error message will appear if a typed Case ID already exists. If prompted, please type another Case ID. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 20 of 63... -
Page 21: Open Case
When connected, the device will start detecting drives allowing a user to choose the desired processes. The drives should be connected and disconnected individually, each time waiting for a message informing about detection or disconnection of the media. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 21 of 63... -
Page 22: Duplication
Duplication Mediaimager allows to create multiple type of a disk images, such as: Disk to disk (cloning 1:1) Created copy is a “mirror” of the original drive - the target drive will be formatted in the same way as the source drive and will be an exact copy of the original. - Page 23 It is possible to plug and unplug drives anytime as long as no process is performed. Application will rescan automatically if it detects any changes. Scanning can be also performed manually by clicking button. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 23 of 63...
- Page 24 Mediaimager supports cloning one disk to one or more target drives. After selecting desired disks click button to proceed. The following screen contains information about chosen devices. It is possible to choose which hash algorithms will be used during the process. Application supports basic hashing such as MD5, SHA1 as well as advanced functions from SHA2 family.
- Page 25 In the top panel application informs a user about the amount of currently running processes. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 25 of 63...
-
Page 26: Disk To Disk (Cloning 1:1) With Marker
The difference between the process without a marker is that the checksum of the target medium is calculated from the entire surface of the medium. The above functionality is applicable in some countries and therefore has been made available in the Mediaimager. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 26 of 63... -
Page 27: Disk To File
At this point, selected source drives, marked in red, will be imaged into a single file on the target drive, marked in green. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 27 of 63... - Page 28 Press OK to proceed with the formatting process or use Cancel button to abandon. Proceed with caution, formatting the drive will erase all data! MEDIAIMAGER – Users’ Guide, Version 1.7 Page 28 of 63...
- Page 29 In case of DD-Linux copy an additional text will appear in which an encryption password will be available. If used, an exact password will be required in order to restore the image from the file (decrypting the copy is possible only on the Mediaimager device). When ready, proceed with button.
- Page 30 Elapsed and remaining times are available at the bottom. Bottom progress bar provides progress percentage and data transfer speed information. The process can be stopped at any time by clicking button. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 30 of 63...
-
Page 31: Disk To File With Span Function
Note that this process does not create an identical copy on all selected target media it only allows you to split the source media (e.g. in the case of large capacity) into several targets. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 31 of 63... -
Page 32: Disk To File - Network Share
In order to do so, the Mediaimager duplicator shall be connected to the network where storage is available and choose “LAN” as Target destination. -
Page 33: Disk To File - Image Allocated Data
Disk to file – image allocated data Mediaimager greatly increased copying possibilities of the device. Using the “Disk to file” copy allows to create binary data images of only the allocated disk space. In order to do so select duplicate menu as described above (page 24). -
Page 34: Disk To File - Image Data Manual
Disk to file – image data manual Mediaimager functionality allows its users to create binary copies of selected disk structures only such as specific files or folders. In order to do so, choose a “Duplicate disk to file” option as described earlier (page 24). - Page 35 A detailed list of all existing partitions, folders and files will be presented to a user. Easy to use file tree allows to choose which data structures will be included in a copy. Simply click on them to mark them. To proceed press the button. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 35 of 63...
- Page 36 The process of adding selected structures to a previously made file container will begin. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 36 of 63...
-
Page 37: Restoring Image
Restoring image Mediaimager provides image restoring functions. This option allows to use previously saved image files and apply them to another drive. Restored image is an exact copy of the source. To start restoration, press the restore tile available at Home screen or select restore option from the left panel. - Page 38 To Restoring process press Upon beginning the restoration process, the application will provide a window with details about the current operation such as transfer speed, estimated time, percentage progress bar and more. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 38 of 63...
- Page 39 When restoring the image, it is possible to use all the functionalities available in the device. The process will run in the background. When it finishes, the appropriate message will be displayed. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 39 of 63...
-
Page 40: Hashing
Hashing Mediaimager provides methods to verify drives and images known as hashing. Commonly used in computer forensics algorithms to calculate checksums in order to determine whether or not the data is corrupted. Disk hashing Disk hashing function allows users to calculate and verify drives checksums. Hashed device must be connected as a source drive. - Page 41 In the next window process status is shown. This screen contains useful information about the current task. Lower section of the screen provides times, data speed and progress bar. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 41 of 63...
-
Page 42: Image Hashing
A running operation can be stopped at any point by pressing button. Image hashing Mediaimager functionality provides methods to hash data stored in an image. This operation is useful in verifying data integrity and completeness. To hash an image devices must be connected as a target drive. - Page 43 Default hashing methods are chosen by the application based on the global settings. In order to change them click and mark the desired ones. After everything is set press button to start the process. This window provides details about a currently run hashing operation. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 43 of 63...
-
Page 44: Disk Hashing With Marker
To calculate a checksum from a disk on which we put the marker, during the process calculation of the checksum, select an option "Mediaimager marker" (the following option will be automatically available if such marker is detected): The above functionality is applicable in some countries and therefore has been made available in the Mediaimager. -
Page 45: Remote Access
Remote access It is possible to gain remote access to the Mediaimager device. “Network” tab has been added, where a user can set up the device network features. In order to connect to the device by remote desktop protocol, a user needs to: ... -
Page 46: Erasing
Any connected or disconnected devices are automatically detected. To scan manually press button. The selected drive will be marked in green colour. Click button to start this operation: MEDIAIMAGER – Users’ Guide, Version 1.7 Page 46 of 63... - Page 47 When erasing media, it is possible to use all the functionalities available in the device. The process will run in the background. When it finishes, the appropriate message will be displayed. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 47 of 63...
-
Page 48: Processes List
If there are any currently active processes, additional message is shown in the lower section of the screen with total transfer speed and estimated time left to finish all the active tasks. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 48 of 63... - Page 49 Select a destination for the report by clicking the device and partition. The chosen drive will be marked as green and button will become active. Click it to save the report. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 49 of 63...
- Page 50 Mediaimager makes it possible to export your reports in a simple and lightweight form of a text file, as well as a more advanced and better-looking PDF format. In order to choose a desired file format simply mark the checkbox in the lower section of the screen.
- Page 51 This window allows a user to read the whole report in application. Scroll it down to see all the details. Press button to see the process status window, next you can use button to go to a full list of process. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 51 of 63...
-
Page 52: Logs
Logs The logs screen is accessible both using Home Screen tiles and the left side panel. Mediaimager distinguishes global logs and case logs. Global logs entries contain details related to whole device usage. This include case creation logs, processes started, drives connected and much more. - Page 53 An additional panel will appear providing a list of available drives connected to Mediaimager as a target disks. Select on which drive the log file should be stored. The selected device will be marked in green colour. At this point the button will activate.
- Page 54 Additional information about a performed report export will be globally noted as well. Mediaimager stores the global logs registered since the device was started. It’s an easy and fast way to review information about the device usage. To see the list press the logs icon on the task bar of the application.
-
Page 55: Diagnostics
In order to start diagnostics press the “Diagnostics” tile in the main menu or click the Wrench Icon from any place in the application using the shortcut panel on the left side of the screen. The Diagnostics window contains a list of hard drives currently connected to Mediaimager presented in the upper section of the screen. -
Page 56: Settings
Press on it twice to save the altered settings. Users have possibility of using advanced acquisition options. Those can be used e.g. with damaged drives containing bad sectors. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 56 of 63... - Page 57 Lower section of the Settings window contains a simple tool allowing a user to change date and time. In order to apply new settings press buttons. There is a drop-down list below, which makes possible to set a different time zone. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 57 of 63...
-
Page 58: Calibrate Touchscreen
Additional details about Mediaimager version are stored here as well. After pressing the “changelog” button details about recent updates and fixes included in software versions are displayed: Calibrate touchscreen It is possible to calibrate the screen manually if there are touch problems. The "Calibrate touchscreen"... -
Page 59: Uncalibrated Device (Medium)
A mistake may mean that during the selected process the media will be misidentified. In the event of a mistake or problems with calibration, please contact the support engineer via e- mail support@mediaimager.com MEDIAIMAGER – Users’ Guide, Version 1.7 Page 59 of 63... -
Page 60: Exit Menu
Hibernate function saves the application’s status and shuts down the device. After powering it on Mediaimager state is being restored (without resuming active processes). Keep in mind, all the above operations stop any active processes! MEDIAIMAGER – Users’ Guide, Version 1.7... -
Page 61: Definitions
.e01 / .ex01 format File extension. First introduced by EnCase software. Besides raw data it contains additional information regarding hashing, data owner, case name, case examiner etc. Most commonly used in computer forensics. MEDIAIMAGER – Users’ Guide, Version 1.7 Page 61 of 63... -
Page 62: Troubleshooting
In an email please provide details about the device’s serial number, nature of the problem, steps taken before and after the problem occurred, additionally the software version number and possible error information displayed on the screen. It is not recommended to perform any advanced repairs without consulting our support engineer. -
Page 63: Are There Any Software Updates For Mi? If So, How Could I Know There Is One
MI owners receive an email message with release notes and downloadable update. Updates are also available on Mediaimager website - http://mediaimager.com/update/. Is the set of adapters only available in the SuperKIT version of MediaImager? Can I buy it separately? No, adapters set is only available together with the SuperKIT version.
Need help?
Do you have a question about the GM4 Basic and is the answer not in the manual?
Questions and answers