SpeedImager™ is a Mac OS X based drive acquisition software designed to secure drive data for further forensic investigation. SpeedImager uses high speed sector copying but limits the imaging to areas within existing data, and ignores sectors with deleted files and empty space, thereby retaining every existing file of the original volume and greatly improving the speed of the acquisition process.
SpeedImager copies all of the information from a suspect drive to a disk image* for archival purposes, retaining every existing file of the original volume. During the acquisition process, SpeedImager skips all the blank space of a drive to improve the copying speed and to save on required storage space for the disk image. For example, for a 2TB with only 300GB data, only 300GB will be acquired. At a speed of 3-5GB per minute, the acquisition task can be completed in less than a couple of hours.
SpeedImager supports quick acquisition of Mac OS X volumes, and it is compatible with media and drives that can be mounted on a Mac including SATA, USB, FireWire, and Thunderbolt hard disk. It uses a proprietary disk image format, in which SpeedImage must be used to restore to a clean drive media for further analysis.
Note: SpeedImager is not suitable for investigations that require analysis of deleted data. Contact SubRosaSoft.com Inc. for a suite of disk imaging software that will fulfill your specific needs.
For volume imaging: in many instances, especially with the current crops of high capacity drives, the volume contains a significant amount of free (or empty) space. In circumstances where the deleted data is not required for analysis, limiting the acquisition to only existing data can result in a much faster acquisition.
To speed up the acquisition of a partition, SpeedImager uses a proprietary data format; other Mac applications and utilities will not be able to view and analyze the contents. The file will need to be first restored to a drive for further inspection and analysis of the data.
SpeedImager includes powerful features and yet easy to use at the same time.
- Image existing partition using quick and efficient algorithm.
- Proprietary drive image may be restored to a disk or partition.
- High-speed backup of up to 5GB/minutes.
- USB 3 and Thunderbolt support.
- Extremely easy-to-use.
*SpeedImager uses a proprietary disk image format which SpeedImage must be used to restore to a clean drive media for further analysis.
Note: No hash support
- OS X 10.6 (Snow Leopard) or above
- Built for OS X Yosemite
- Intel based Macintosh
- Plenty of disk storage space