SpeedImager

Spread the love

1: Introduction – About SpeedImager

What is SpeedImager?

SpeedImager is a powerful Macintosh application for quick securing and acquiring Macintosh partitions. SpeedImager is HFS Plus dependent, which means that the investigator can secure data from a normal Mac OS formatted hard drive, USB key, and almost any other media that are formatted in Mac OS X’s HFS Plus format.

Even with its advanced features and performance, SpeedImager is extremely straightforward to handle. The easy-to-use interface is designed with any level of OS X investigator in mind and is highly accessible to all, with the completion of the whole backup or restore process in just a few clicks.

SpeedImager Features

Written specifically for Mac OS X, SpeedImager includes powerful features that give the investigator greater control and flexibility in securing and acquiring data:

High speed operation – The backup process copies all of the information from the source volume to a proprietary disk image for archival purpose, retaining every detail of the original volume. During the backup, SpeedImager skips all the blank space of a drive to improve the copying speed and to save on required storage space for the disk image.

Works on faulty hardware – SpeedImager can recover data from mechanically unsound devices. The software uses several tried and tested methods, which in addition SubRosaSoft has improved upon, to read the same piece of information and to automatically skip of areas of the file system that are fully unreadable. By employing these methods, SpeedImager is able to acquire data from sources that may have appeared to other software to be too physically broken to use. To do so the acquisition process uses an intelligent algorithm to recover mechanically unsound drives. Even if the drive has been partially mechanically compromised, SpeedImager has the best chance at recovering evidence for further data retrieval and analysis.

Contacting SubRosaSoft.com

Comments & Questions
If you have comments, problems, or questions about this product, please contact us via email: info@subrosasoft.com

For information regarding technical help, please refer to “Finding Help…” at the end of Chapter 2.

SpeedImager is programmed to run on the following minimum specification:

  • Intel based Dual Core Apple Macintosh CPU, that is capable of running
  • Mac OS X Version 10.6 or above (Built for OS X Yosemite), with at least
  • 1 GB of RAM
  • Hard Disk (with 30 mb of space free for installation)
  • Second hard disk with sufficient disk space
  • Write blocker hardware strongly recommended
Quick Tip: Write blocker hardware strongly recommended
Connecting a suspect drive without a write blocker can compromise the integrity of the evidence.

Installing or Updating via Download

Once the software has been downloaded from the site and decompressed, the user can drag and drop SpeedImager from the mounted disk image into the Applications folder. If prompted to replace the existing version of the file, click Replace.

Initial Setup

Copy Right

The first time the application is launched the user will be asked to accept the End User License Agreement (see Appendix C) and then to enter a valid registration number.

Enter Serial Number

Having done entering the serial number the user will be asked the administrator user password for the installation of files to the host computer. Once correctly entered, the necessary files will be added to the system, the user will then be taken to the Main Window.

The password is your administrator password, and not something assigned by us. If you don’t have a password (blank), you will need to assign one to the system to use MacImager.

To add a password, open your System Preferences… under the Apple menu. Click on Account
Then click on Change Password…and enter a new password. The user will be taken to the Main Window.

Finding Help & Technical Support

Should the investigator need assistance working with FileCopier, there are a number of sources through which to get help:

Help within SpeedImager

The investigator can find from the Help drop menu, which offers the option to “Show Help”, taking the investigator other relevant web pages on the SubRosaSoft web site.

Technical Support

Our technical support is free via email and can be accessed at the following address: support@subrosasoft.com. The support hours are 10am to 6pm Pacific Standard Time Monday to Friday.

In addition to any support question(s), the investigator must include ALL of the following pieces of information:

  • Purchase information.
  • System configuration(s) – hard drive make, model etc.
  • System OS version.

System related information can be found by using the “System Profiler” application in the /Applications/Utilities folder.

3: Using SpeedImager – Navigating the Windows & Using the Functions

The Main Window

Immediately after start-up, the investigator will be presented with the SpeedImager splash screen. Once this has disappeared, he or she will then be taken to the ‘Main Window’. 

SpeedImager main window

The Layout

The main window layout can be effectively divided into 3 sections: a panel for selecting volume to be backup/restore, a panel for selecting the operation (Backup or Restore), and progress bar at the bottom.

Using Backup or Restore a Volume

Backup or Restore a Volume is a quick and easy way by which to make a disk image of a working volume to a backup device, which then can be used at a later date to make a full restore from the image on the backup device to the working volume, or an equivalent replacement.

The backup process copies all of the information from the source volume to a disk image for archival purpose, retaining every detail of the original volume. During the backup, SpeedImager skips all the blank space of a drive to improve the copying speed and to save on required storage space for the disk image.

Starting Backup/Restore

To start the ‘Backup or Restore a Volume’ process, the user must select the volume they wish to backup or restore from the volume the listing. 

Performing a Backup

Select Volume to Backup

Once the desired volume has been selected from the Volume list, select the ‘Backup’ radio button below the volume listing. To start the process, click the ‘Start’ button. You will then be prompted to select where you would like to save the backup image file.

Destination Selection

Once you have chosen a save location a status dialog will appear and show current copying speed and other related information. When the task is completed, a dialog will inform the user. 

Complete

Quick Tip: Quick Tip: Backing up a Boot Disk
When making a backup of the Apple Mac system’s boot volume, the user will need to boot from another drive or a bootable USB memory stick with SpeedImager installed to use the backup/restore, duplicate and recovery functions.

Performing a Restore

Once the user has selected the volume they wish to restore from the volume listing, select the radio button marked ‘Restore’ below the volume listing. 

Select the Restore Button

Clicking the ‘Start’ button will then prompt the user to select the backup image they wish to restore the drive from. 

Select Restore Destination

Once the image has been selected and the user clicks the ‘Open’ button, the restore process will start. A status dialog window will appear and display various information about the current restoration progress. 

Restore Process

A notification window will appear when the process is complete. 

Complete

4: Appendices – Getting Help and Technical Support

Finding Help within SpeedImager

Help can be found both via the standard help menu at the top of the screen.

On the Web

We provide over 100 links to forensic resources, manuals, a complete knowledge base and a plethora of additional information on our website. For updates, resources and additional information please visit: https://www.subrosasoft.com

Technical Support

We provide free technical support both via email or phone during the hours 10am to 6pm Pacific Standard Time (GMT -8) Monday to Friday. By email, we can be reached at the following address: support@subrosasoft.com. By phone, we can be reached at: +1 (510) 870 7883, or by fax on +1 (510) 868 3407.

In addition to any support question(s), the examiner must include ALL of the following pieces of information:

  • Valid purchase information.
  • System configuration(s) – hard drive make, model etc.
  • System OS version.
  • System related information can be found by using the “System Profiler” application in the -/Applications/Utilities folder.

Comments and Questions

If you have comments, problems, or questions about this product, or if you are interested in a site license, please contact us via email: info@subrosasoft.com

Company Address:

SubRosaSoft.com Inc.
5387 Diana Common
Fremont, California 94555