SAFE Block is a computer forensics tool designed for Windows 2000 / XP operating systems that enables quick and secure acquisition and analysis of attached disk or flash media on workstations using a software write blocker.
With a simple Windows GUI interface, the user can easily block or un-block any disk or flash storage device detected by Windows, which are organized in a tree structure by type (USB, SCSI, IDE) and controller / channel where applicable. This feature enables simultaneous write blocking of multiple disk devices connected to a computer, without the need for expensive hardware write blockers.
SAFE Block is application-independent and compatible with all forensic acquisition and analysis applications that run on Windows 2000 / XP. It offers write-blocked, Windows-based, disk imaging at significantly faster speeds than imaging in Windows using commercially available hardware-based write blockers, making it an ideal tool for efficient forensic investigations.
SAFE Block also features advanced functionality such as identifying and providing access to Host Protected Areas (HPAs) and Device Configuration Overlay (DCOs) on IDE (PATA and SATA) disks, and automatic write blocking of all directly attached media, including IDE, SCSI, USB, and IEEE 1394, with configurable write blocking policies for fixed and removable disks.
Moreover, SAFE Block offers ease of use through the user's ability to have it remember each device's blocked or un-blocked status, enabling hassle-free media use on a workstation / laptop without having to manually configure the device's settings. Its ability to temporarily remove HPAs using volatile HPA commands also means that it makes no permanent modification to the disk configuration, while preserving all DCO information for safe removal and subsequent reconfiguration after the acquisition is complete.
Considering its impressive features and compatibility with multiple forensic acquisition and analysis applications, SAFE Block is an excellent choice of tool for any forensic investigator seeking a reliable write blocker solution for their Windows 2000 / XP computer.
Version 1.0: Trial license available at www.forensicsoft.com