Ditto Forensic FieldStation

Ditto Forensic FieldStation
Product Banner
Digital investigation, eDiscovery, data capture and analysis
    • Corporate security, law enforcement, military applications
    • Discover, preview, and image files from hard drives and network file systems
    • Physical Imaging of complete hard drives
    • Automatic Logical Imaging of specific file types from hard drives and network file systems
    • Fully networked remote operation
    • Free feature upgrades (Download the latest Ditto® firmware.)
    • Rugged, all-metal, silent fan-free construction
    • Free 3-year warranty and no annual fees

Ditto Forensic FieldStation

NOTE: The CRU WiebeTech Ditto® Forensic FieldStation and its browser-based interface have been fully analyzed and verified to not be susceptible to either the Heartbleed bug or the Shellshock security hole. For more information, contact sales@cru-inc.com or support@cru-inc.com.



Stay home, send Ditto: Save time and money.

The hand-held Ditto Forensic FieldStation travels with you or a technician for use in creating local, remote, or networked disk clones and images, including logical imaging of user-selectable lists of files and folders. Configure and manage via network or on the unit itself. The Ditto FieldStation also helps you log user activity and maintain your chain of custody while using forensic (write-blocked) methods.

Flexibility and speed via browser-based interface

An easy-to-use web browser interface supports remote operation via network or VPN, providing access to Ditto configuration, user administration and user rights, as well as direct operation of Ditto cloning and imaging operations. This time- and money-saving capability speeds time to data capture, as well as allows organizations to optimize staffing and deployment.

Create logical and physical images in the field

The built-in menu system makes it easy to configure and perform forensic captures of selected files–without an attached computer. Generate complete listings of drive or file system contents to facilitate discovery, or automatically capture specific file types using the following Logical Image Modes:

  • Manual select
  • All files and directories
  • All files not part of a Windows OS
  • All files not part of a Windows OS or application
  • All files from the Windows Users directory
  • All temporary files created by Windows
  • All files except Swap and Hibernate
  • All most commonly used media files
  • All Microsoft Office files and PDFs
  • All financial files
  • User-customized profiles
Suspect Inputs (write-blocked)

Ditto natively supports many write-blocked inputs: SATA, eSATA, PATA, USB2.0. Additional acquisition interfaces are available via expansion modules, such as the Ditto USB 3.0 Expansion Module and Ditto SAS Expansion Module.

Destination Outputs

Use dual SATA outputs simultaneously with same performance as one eSATA (single, dual and mirrored). Images can also be output to large volumes, including NAS and other network destinations, as well as portable RAID enclosures.

Data Acquisition Modes

Clone, DD, E01, L01 with MD5 or SHA-1 hashing. Ditto also offers a combined mode that captures a clone and DD (to different destination drives) in a single pass reading of the suspect drive.

Complete and Secure Erasure

Ditto is capable of sanitizing drives with preset erase modes or a user configurable pattern.

Water-resistant, dust-proof Pelican® custom carrying case available

Convenient, customized field kits are available for Ditto and accessories.

ModelCase TypeDescription
Ditto Field Kit "D" Pelican 1450 This compact, rugged case features custom foam with slots for one Ditto, four expansion modules, plus accessories, with a little room left over for adding additional tools of your choice
Ditto Field Kit "K" Pelican 1510 Also known as "Quad Ditto Carrying Case," this rolling, dust-proof, water-resistant case features custom foam with slots for up to 4 Dittos, expansion modules, write-blockers, and accessories
Ditto Field Kit "L" Soft side zipper case This highly-portable kit includes slots for a Ditto, up to two pocket drives for target storage, a CD/DVD reader, accessories, and a Media WriteBlocker


Update your Ditto Forensic FieldStation

Make sure you have the most current features by downloading the latest Ditto Firmware.

Test drive a Ditto today

Take advantage of our unique ability to take control of an online demo unit!

Part Numbers

Ditto Forensic FieldStation

Image, clone or browse SATA, IDE, USB, ethernet devices; write to LAN or 2 SATA targets

US plug
part #: 31700-2809-0000

UK plug
part #: 31701-2809-0000

EU plug
part #: 31702-2809-0000

AU plug
part #: 31703-2809-0000

Ditto Expansion Modules

Add support for additional drive types to Ditto

For SAS (Serial Attached SCSI) devices
part #: 31030-1560-0000

For FireWire drives (IEEE 1394a & IEEE 1394b)
part #: 31030-1582-0000

For USB 3.0 drives
part #: 31030-1589-0000

Ditto Field Kit D

Ditto Carrying Case (Pelican 1450); custom foam for Ditto & 4 exp. modules

Kit D0: empty
part #: 31310-0000-0060

Kit D1: Ditto & accessories; US
part #: 31310-2809-0061

Kit D1: Ditto & accessories; UK
part #: 31311-2809-0061

Kit D1: Ditto & accessories; EU
part #: 31312-2809-0061

Kit D1: Ditto & accessories; AU
part #: 31313-2809-0061

Kit D2: Ditto, FUDv5, FCDv5, MWB, accessories; US
part #: 31310-2809-0063

Bundle of 2 "D1" Kits w/special pricing; US
part #: 31310-2809-0062

Ditto Field Kit K

Quad Ditto Carrying Case (Pelican 1510); custom foam for up to 4 Dittos + exp. modules

Kit K0: empty
part #: 31310-0000-0065

Kit K1: 1 Ditto; US
part #: 31310-0000-0066

Kit K2: 2 Dittos; US
part #: 31310-0000-0067

Kit K2: 2 Dittos; UK
part #: 31311-0000-0067

Kit K4: 4 Dittos; US
part #: 31310-0000-0069

Kit K4: 4 Dittos; UK
part #: 31311-0000-0069

Ditto Field Kit L

Soft-side carrying case

Kit L1: includes Ditto, Media WriteBlocker, DVD reader, & accessories; UK
part #: 31311-0000-0070

Kit L1: includes Ditto, Media WriteBlocker, DVD reader, & accessories; EU
part #: 31312-0000-0070

Kit L0: empty slots for a Ditto, Media WriteBlocker, DVD reader, & accessories
part #: 30030-0000-0031

Kit L1: includes Ditto, Media WriteBlocker, DVD reader, & accessories; US
part #: 31310-0000-0070



AES 256-bit encryption adapter accessory; works with UltraDock v5 or Ditto to encrypt attached drives

With keys
part #: 31010-0430-0000

No keys
part #: 31010-0430-0001

Ditto Expansion Modules

Add support for additional drive types to Ditto

For SAS (Serial Attached SCSI) devices
part #: 31030-1560-0000

For FireWire drives (IEEE 1394a & IEEE 1394b)
part #: 31030-1582-0000

For USB 3.0 drives
part #: 31030-1589-0000

Ditto Protective Cover

Ditto Protective Cover - silicone glove for protecting a Ditto Forensic FieldStation when not in use
part #: 3003-0000-06

Encryptor Cable Kit

Encryptor Cable Kit, includes cables for using Encryptor with various third-party products
part #: 7100-3000-01


Product name Ditto Forensic FieldStation
Host (I/O) Ports (1) USB 2.0 type A
(3) eSATA: up to 3 Gbps
(1) Gigabit (1000Base-T) Ethernet
Drive Types Supported
  • PATA/IDE 2.5" drives (with included cable)
  • PATA/IDE 3.5
  • SATA 2.5" drives
  • SATA 3.5" drives
  • SATA SSD (solid state drives)
  • SAS 2.5" drives (with SAS Expansion Module)
  • SAS 3.5" drives (with SAS Expansion Module)
  • Hitachi 1.8" drives (with PATA Adapter)
  • Toshiba 1.8" drives (with PATA Adapter)
  • Compact Flash (with PATA Adapter or Expansion Module)
  • SD Card (with PATA Adapter or Expansion Module)
  • Memory Stick (with PATA Adapter or Expansion Module)
  • PCMCIA (with PATA Adapter)
  • MacBook Air 2010 (with SATA Adapter)
  • MSATA (with SATA Adapter)
  • MC (with adapter)
  • DOM (with PATA Adapter)
  • PCIe PATA (with PATA Adapter)
  • PCIe SATA (with PATA Adapter)
  • Micro Drives (with PATA Adapter)
  • PCIe USB (with PATA Adapter)
  • USB Thumb Drives (Native USB 2.0, or USB 3.0 via Expansion Module)
  • USB drives via USB cable (Native USB 2.0, or USB 3.0 via Expansion Module)
  • FireWire drives via FireWire cable (with FireWire Expansion Module)
SATA Speed 3G
Supports S.M.A.R.T. disk info Yes
Number of LEDs 10
Description of LEDs Power in 5V/12V, USB, Source Network, IDE, eSATA, Expansion, HPA/DCO, Destination Network, eSATA A, eSATA B
LCD Screen Four-line backlit LCD controlled with four soft-touch menu navigation buttons Browser-based Ditto interface allows for direct operation, remote operation, and administration.
LCD Info 4 line
LCD Backlight Yes
Stealth Mode Disable all light output (LEDs/LCD). LCD readable with night-vision goggles.
Navigation menu LCD/button driven menu system
Web admin interface Operable from a web browser.
Operating system compatibility Windows XP or later
Mac OS X 10.4.x or higher
iOS Tablets/phones
Andriod Tablets/phones
Most versions of Linux
Browser compatibility Internet Explorer
Detects/reports HPA/DCO Yes
Allows HPA/DCO override Temporarily or permanently remove HPA/DCO
Fan(s) Fanless design
Construction material(s) All-aluminum construction
Ambient humidity range 5% to 95%, non-condensing
Power switch 2 position: On / Off
Power input 40W 12V 3.33A DC
Power input connector Barrel connector (center pin positive)
SATA Power Input Yes
Molex Power Input Yes
Dimensions 4.92" x 6.77" x 1.72" (125mm x 172mm x 43.7mm)
Weight 5.00 lbs. (2.27 kg)
Write Blocking Yes (source side)
Write Blocked ports eSATA (SATA), PATA/IDE, USB 2.0\r\nOther input types and drive types supported with Ditto Expansion Modules or drive adapters
Hashing Yes
Hashing info None, MD5, SHA-1, MD5 + SHA-1. Hash types are hardware-accelerated; can hash during image or clone.
Erase modes Clear Partition Table, Quick Erase, Custom Erase, Secure Erase Normal, Secure Erase Enhanced, DoD Clear, DoD Sanitize, NIST800-88 Clear, NIST800-88 Purge
Image/clone output modes Single Drive Image, Single Drive Clone, Image and Clone, Image to mirrored disks, Clone to mirrored disks
Compliancy FCC, CE, RoHS, C-Tick, RCM
Warranty CRU provides a 3-year limited warranty for this product.
Technical Support Your investment in CRU products is backed up by our free technical support for the lifetime of the product. If you need to contact us for any reason, visit cru-inc.com/support or call us at 1-800-260-9800 or +1-360-816-1800.

Product Images

Product Videos


Nov 23, 2013 - 2.61 MB
Quick Start Guide for Ditto Forensic FieldStation
Nov 25, 2013 - 670.74 KB
Quick Start Guide for Ditto USB 3.0 Expansion Module
May 21, 2014 - 1.48 MB
Quick Start Guide for Ditto SAS Expansion Module
Mar 25, 2015 - 577.27 KB
Quick Start Guide for Ditto FireWire 800 Expansion Module
Apr 23, 2015 - 3.52 MB
Data Sheet for Ditto Forensic FieldStation
Oct 29, 2015 - 2.22 MB
Ditto Forensic FieldStation User Manual

Sending your message. Please wait...

Thanks for sending your message! We'll get back to you shortly.

There was a problem sending your message. Please try again.

Please complete all the fields in the form before sending.

Please enter a valid email address before sending.