CFID v3.0 - Covert Forensic Imaging Device

You are here:
Home
Mobile Device Forensic Tools
CFID v3.0 – Covert Forensic Imaging Device

CFID was designed for forward deployed military, intelligence, and law enforcement personnel who need a simple, small, portable and inconspicuous solution for imaging, cloning, copying and wiping data from portable media such as USB and SD Cards. The additional capabilities including iOS, Android and Sim Card extraction as well as direct PC and Laptop acquisition make the CFID a multipurpose solution for the field and lab use.

Download the CFID Brochure.

Military | Intelligence Agencies | Law Enforcement | Forensic Labs

CFID is the smallest, easiest, and fastest way to collect
data in the field.

Part No:
AP-CFID3

REQUEST A QUOTE

First Name(required)

Last Name(required)

Email address(required)

Agency(required)

Phone Number

Street Address (required if requesting a quote)

City

State

Zip Code

What's the best way to contact you?

Phone

SKU/Part Number of Order
(If ordering different products, please list additional products below.)(required)

Quantity(required)

Further Questions / Product Listings

This field should be left blank

Please wait...

Now includes UAV Exploitation Software

The CFID utilizes SkySafe technology to support a large number of commercial UAV products. The CFID supports the extraction and processing of GPS and metadata within a few moments of capture.

Thumb-Drives, SD Cards, Sim Cards, iOS Devices, Android Phones and Laptops represent the source of the most common forms of digital evidence recovered today. While some computer and cell phone forensic tools are equipped to collect data from these media, a standalone tool dedicated to the task will improve efficiency and free up equipment. Most importantly however, using a dedicated device will greatly simplify and speed up the process.

Forensically Image or Clone a device

The CFID has seven primary functions: Image, Clone, Copy, Format, Wipe, Mobile Extraction (iOS, Android), and Sim Card Extraction, as well as PC and Laptop Imaging and Copying. each executed through the simple touch screen interface. It captures the serial number and make model of each device encountered as well.

A suitcase is handheld. This handheld device fits in your hand.

The CFID provides 128GB of internal storage with allowing for external storage as well. When imaging a device, the system creates a folder for each image acquired, and each folder is named with a reference number date-time stamp. The file can be split, compressed and hashed for as required for reference by the forensic examiner.

Keep It Simple

Data collection by field operatives can quickly become an increasingly complicated and time-consuming task. While a number of tools have been successfully deployed to capture data from various media types, the scope and quantity of devices being found warrants a better means of collection. We need a simple, covert and effective device for portable media acquisition.

Features

iOS Extraction
Android Extraction
PC and Laptop Extraction
Sim Card Extraction, Watchlist, and Analysis
Touchscreen 4 Taps To Image
4-6 Hour Battery Life with Indicator
Anodized Aluminum Case
Very Small & Handheld
Multi-Language Support
User Selectable Copy Block Size
Optional MD5,SHA1,256
Configurable Compression
Vibration Notification
Format Disks

Comes with complete cable kit and case

EASY TO USE

We cannot always send out our most highly trained forensic experts to the front lines to image and collect portable media.

Maybe the situation is too dangerous…Maybe the operation has a limited footprint requirement…Maybe the operator did not know he is going to need to do a forensic acquisition and wasn’t able to pack the dedicated write blocker, forensic laptop, dongles, and cables..

For this reason, the CFID was meant to be operated by anyone… and anywhere.

It takes 4 clicks on the simple, fat-finger friendly touch screen to begin an E01 or dd style image of a suspect media device. The CFID also employs haptic feedback (vibration) to alert the operator when an imaging process is complete.

TURN ON THE CFID.
INSERT SOURCE DEVICE.
INSERT DESTINATION DEVICE.
CLICK ‘IMAGE’, THEN CONFIRM SOURCE, CONFIRM DESTINATION, AND CLICK START.

Once finished, the operator will have a full image of the source device on his own external device that can be handed off to a forensic expert for analysis whenever possible.

Forensic Integrity

In this business every single byte counts. Even more, every single bit counts.

The CFID performs forensic acquisitions while ensuring the following industry standard conditions are met:

MD5 AND SHA (1,256) CHECK-SUMS ARE COMPUTED.
SOURCE DEVICE IS WRITE-BLOCKED TO ENSURE NO DATA IS EVER MODIFIED ON IT.
IMAGES ARE CREATED IN STANDARD DD OR E01 FORMATS FOR COMPATIBILITY WITH ANY MAJOR ANALYSIS TOOL.
BLOCK SIZE CAN BE SET FOR INCREASED PERFORMANCE DURING THE IMAGE PROCESS FROM 1 SECTOR, TO 1 MB.
COMPRESSION CAN BE ENABLED TO OPTIMIZE DESTINATION DRIVE FOR SPACE WHEN IMAGING LARGE DRIVES.

Handheld Battery Powered

The CFID is the worlds first battery powered, truly portable, handheld forensic imaging device.

It features a 6100mah Li-Poly rechargeable battery that will last 4-6 hours with normal usage on a single charge.

Because the unit features a USB device port, you can charge the CFID from any usb port on any other usb device including laptops, desktops, or cell phone charging ports.

CHARGE VIA STANDARD USB 3.0 PORT ON ANY LAPTOP, DESKTOP OR DESKTOP AND WILL NOT REGISTER AS A DEVICE.
6100MAH LI-POLY RECHARGEABLE BATTERY.
LESS THAN 1″ DEEP AND WITH A SMALLER OUTLINE THAN A SMARTPHONE THIS IS A TRULY HANDHELD AND PORTABLE PRODUCT.
FITS EASILY IN A POCKET.

Functions

The CFID is designed to perform any of the 7 main tasks below. It’s main functions are to Image, Clone, Mobile extractions and Sim card analysis, but it can be a very useful and handy tool when used to wipe, format and copy drives.

IMAGING
Imaging creates a forensic image of the source device as a file on the destination device. The file can be compressed, and check sums can be computed on the fly.

CLONING
Cloning duplicates one block level device onto another. You can set the block size to optimize clone speed.

IOS & ANDROID BACKUP EXTRACTIONS
The CFID can perform backups of iOS & Android devices. Giving all data from backups recently done on that phone.

SIM CARD ANALYSIS
Sim card analysis allows users to forensically image, store and analyze on the device. Easy analysis is provided directly on the CFID giving the serial number, the acquisition date, sms messages and contacts on that sim card.

WIPING
Wiping can be done 3 different ways. It is important to select the right one based on your time available and forensic requirements.

a. Wiping can wipe a pattern of all zeros ʻ00000000….ʼ to a block level device at the device level.
b. Wiping can wipe a random pattern to a block level device at the device level.

FORMATTING
Formatting will wipe the partition table of a drive and create a fat32, NTFS, or ext file- system on a newly created partition. This does not wipe the drive, but quickly creates a new partition table with a single formatted primary partition. This is useful to prepare a destination drive, or personal drive prior to use.

COPYING
Copying will allow you to copy only the active files from either of the source drives (SD or USB) or from the Internal drive, to the destination USBdrive, or the Internal drive. The CFID mounts the source drive as read-only if this option is used. This feature is useful when only the active content is required and a forensic image is not required.

CFID V3 Kit

CFID V3
Charging Unit with US/UK/Euro plugs
Ethernet to USB Adapter Cable
RJ 45 Cable
Micro USB 3.0 to SUB 3.0
Micro USB 3.0 to USB Type – C Cable
USB Micro B to Type A Female Adapter
USB 2.0 Type A to Micro Cable with type C and Lightening Adapter Caps
USB Type C to USB 3 Type A Female Adapter Cable
USB 3.0 Multi-Card Reader
2 SIM Adapter Sets
Soft Case