Which feature of the Disk Jockey Pro did you find most important and why?
Rapid low cost imaging
Is the Disk Jockey Pro cost-prohibitive?
Yes, because if you are buying anything for forensics you want to make sure the evidence is admissible.
DJP was originally designed and marketed as a hard drive duplicator and diagnostic tool for IT professionals, system administrators, and data recovery specialists, not forensic duplicator.
I would question the integrity of the expert witness and or forensic expert if they used a DJP because it lacks strong forensic write-blocking (risk of modifying source drive), doesnt provide detailed forensic logs or reports for chain of custody, it has limited storage support (mainly IDE/SATA, no NVMe or SAS) and lacks network imaging for remote forensic work.
Conversely, the Tableux looks more reliable than my former fiance and has all the features that DJP doesn’t which keeps it relevant for the next few years.
Finally, I would admonish DOJ for the pathetic excuse for a test that probably cost us thousands of dollars which produce self-defeating results.
If the point of a forensic imager is to write block and read only, and the test was considered successful because “all visible sectors were successfully overwritten” means that it doesn’t work or DOJ wants to be able to irrevocably destroy evidence?
Download DOJ_DJP_Report.pdf
Not sure what I’m missing here.
Oh, finally, Diskology is out of business, so if you want something guaranteed to corrupt evidence you can only get them on ebay for 100 bucks now.
https://www.ebay.com.hk/itm/115885964694Links to an external site.
Leave a Reply