DeepSpar Data Recovery Guardonix USB 3.0 Writeblocker for Forensic Examiners

A device from DeepSpar Data Recovery Systems is making possible for digital forensic examiners to capture lost evidence from malfunctioning HDDs, SSDs, and other storage devices.

To perform forensic analysis, storage devices are commonly connected to a forensic workstation through the USB interface. A writeblocker is required to ensure that evidence is not altered during analysis. An advantage of Guardonix is that in addition to writeblocking, it also stabilizes the USB connection – if a storage device is malfunctioning and intermittently goes offline, Guardonix hardware handles the issue, allowing data acquisition to succeed. Demo videos are available which describe its inner workings in more detail.

“A storage device suffering internal exceptions during imaging can cause workstations to freeze, crash, drop the connection, or work at an unacceptably slow speed, all of which can trap valuable evidence inside a damaged storage device,” says Serge Shirosales, director, DeepSpar. “Traditionally, solving these types of issues has always required thousands of $s of specialized data recovery equipment and hundreds of hours of practical experience, putting the solution out of reach of law enforcement organizations who need it the most. Guardonix is much more accessible, both in terms of its low price point and ease of use, giving many examiners the first viable solution to this problem.“

The company is offering digital forensic examiners an opportunity to try out Guardonix for free to confirm their claims first-hand.

Applications can be submitted from the company’s website.

The product recently received a glowing review at DFIR Training where Brett Shavers concluded: “Guardonix is now a mandatory part of my DFIR kit. You should seriously consider one for yours too.”

Resource:
DFIR training blog: If you don’t already have a DeepSpar Guardonix, you might want to get one