Sending your message. Please wait...

Thanks for sending your message! We'll get back to you shortly.

There was a problem sending your message. Please try again.

Please complete all the fields in the form before sending.

Please enter a valid email address before sending.

Ditto Forensic FieldStation

Ditto Forensic FieldStation has been discontinued. For other options, see our other Ditto products.

Part Number 31700-2809-0000
Product Name Ditto Forensic FieldStation
SATA Bus Speed 3G
Host (I/O) Ports (1) IDE/PATA -- source side
(1) USB 2.0
(3) eSATA -- one source, two destination -- up to 3 Gbps
(2) Gigabit (1000Base-T) Ethernet -- one source, one destination/GUI access
Drive Types Supported PATA/IDE 2.5" drives
PATA/IDE 3.5
SATA 2.5" drives
SATA 3.5" drives
iSCSI (network attached SCSI)
SATA SSD (solid state drives)
SAS 2.5" drives
SAS 3.5" drives
Hitachi 1.8" drives
Toshiba 1.8" drives
MacBook Air 2010
MSATA
Mini PCIe PATA
Mini PCIe SATA
Mini PCIe USB
PCIe/NVMe
USB Thumb Drives
USB drives via USB cable
FireWire drives via FireWire cable
Sector Size Compatibility Compatible with 512n drives as well as Advanced Format 4Kn and 512e type drives
Supports S.M.A.R.T. disk info Yes
Number of LEDs 10
Description of LEDs Power in 5V/12V, USB, Source Network, IDE, eSATA, Expansion, HPA/DCO, Destination Network, eSATA A, eSATA B
LCD Screen Four-line backlit LCD controlled with four soft-touch menu navigation buttons. Browser-based Ditto interface allows for direct operation, remote operation, and administration.
LCD Info 4 lines x 24 characters width
LCD Backlight Yes (backlighting can be disabled using stealth switch)
Stealth Mode Disables all light output (LEDs/LCD). LCD readable with night-vision goggles.
Navigation menu LCD/button driven menu system
Web admin interface Operable from a web browser
Operating system compatibility Windows XP or later
Mac OS X 10.4.x or higher
iOS Tablets/phones
Android Tablets/phones
Most versions of Linux
Browser compatibility Internet Explorer
Firefox
Safari
Chrome
Opera
Detects/reports HPA/DCO Yes
Allows HPA/DCO override Temporarily or permanently remove HPA/DCO
Fan(s) Fanless design
Construction material(s) All-aluminum construction
Ambient Humidity Range 5% to 95%, non-condensing
Power switch 2 position: On / Off
Power input 40W 12V 3.33A DC
Power input connector Barrel connector (center pin positive)
SATA Power Input Yes
Molex Power Input Yes
Dimensions 4.92" x 6.77" x 1.72" (125mm x 172mm x 43.7mm)
Weight 5.00 lbs. (2.27 kg)
Write Blocking Yes (source side)
Write Blocked ports eSATA (SATA), PATA/IDE, USB 2.0; other input types and drive types supported with Ditto Expansion Modules or drive adapters
Hashing Yes
Hashing info None, MD5, SHA-1, MD5 + SHA-1. Hash types are hardware-accelerated; can hash during image or clone.
Erase modes Clear Partition Table, Quick Erase, Custom Erase, Secure Erase Normal, Secure Erase Enhanced, DoD Clear, DoD Sanitize, NIST800-88 Clear, NIST800-88 Purge
Image/clone output modes Single Drive Image, Single Drive Clone, Image and Clone, Image to mirrored disks, Clone to mirrored disks
Warranty CDSG provides a 3-year limited warranty for this product.
Technical Support Your investment our product is backed up by our free technical support for the lifetime of the product. If you need to contact us for any reason, visit our website.

About Ditto Forensic FieldStation

Stay home, send Ditto: Save time and money.

The hand-held Ditto Forensic FieldStation travels with you or a technician for use in creating local, remote, or networked disk clones and images, including logical imaging of user-selectable lists of files and folders. Configure and manage via network or on the unit itself. The Ditto FieldStation also helps you log user activity and maintain your chain of custody while using forensic (write-blocked) methods.

 

Remote operation

An easy-to-use web browser interface supports remote operation via network or VPN, providing access to Ditto configuration, user administration and user rights, as well as direct operation of Ditto cloning and imaging operations. This time- and money-saving capability speeds time to data capture, as well as allows organizations to optimize staffing and deployment.

 

Create logical and physical images in the field

The built-in menu system makes it easy to configure and perform forensic captures without an attached computer. Optionally, attach a computer for additional options such as generating complete listings of drive or file system contents to facilitate discovery, or automatically capture specific file types using the following Logical Image Modes:

  • Manual select
  • All files and directories
  • All files not part of a Windows OS
  • All files not part of a Windows OS or programs
  • Windows Registry files
  • All files from the Windows Users directory
  • All temporary files created by Windows
  • All files except Swap and Hibernate
  • All most commonly used media files
  • All Microsoft Office files
  • All financial files
  • User-customized profiles

 

Source Inputs (write-blocked)

Ditto natively supports many write-blocked inputs: SATA, eSATA, PATA, USB 3.x/2.0. Additional acquisition interfaces are available via expansion modules, such as the Ditto USB Expansion ModuleDitto SAS Expansion ModuleDitto FireWire Expansion Module, and Network Tap Module.

 

Destination Outputs

Use dual SATA outputs simultaneously with the same performance as one eSATA (single, dual and mirrored). Images can also be output to large volumes, including NAS and other network destinations, as well as portable RAID enclosures.

 

Data Acquisition Modes

Clone, DD, E01, L01 with MD5, SHA-1, or SHA-256 hashing. Ditto also offers a combined mode that captures a clone and DD or E01 (to different destination drives) in a single pass reading of the suspect drive.

 

Pause and Resume

The Ditto was the first to include a pause and resume feature. When creating a Physical Image DD, the investigator may pause the imaging process, disconnect everything for secure storage and then come back later to resume the image without losing any previous work.

 

Image Restore

Restore an image to a Destination drive to create a bootable clone of the original drive.

 

S.M.A.R.T. and hdparm Data

The Ditto allows investigators to collect S.M.A.R.T and hdparm data for any connected device.

 

Hard Drive Password Lock/Unlock and Encryption

The Ditto automatically identifies drives that are firmware password protected. The investigator may enter the password if known to unlock the drive. The Ditto also supports whole disk encryption using the AES 256 OPAL encryption schema. If known, the investigator can enter the passphrase to decrypt the drive for imaging.

 

PCIe Support

The Ditto supports imaging NVMe drives and using NVMe drives as a Destination device. Additionally, other PCIe devices can be accessed using PCIe adapters.

 

Complete and Secure Erasure

Ditto can sanitize drives with preset erase modes or a user configurable pattern. NVMe devices and other drives can be securely wiped using a variety of sanitization modes including DOD Clear and Sanitize modes plus NIST800-88 Clear and Purge. The drive can also be formatted after the erase is complete.

 

Water-resistant, dust-proof Pelican® custom carrying case available

Convenient, customized field kits are available for Ditto and accessories.

ModelCase TypeDescription
Ditto Field Kit "D" Pelican 1450 This compact, rugged case features custom foam with slots for one Ditto, four expansion modules, plus accessories, with a little room left over for adding additional tools of your choice
Ditto Field Kit "K" Pelican 1510 Also known as "Quad Ditto Carrying Case," this rolling, dust-proof, water-resistant case features custom foam with slots for up to 4 Dittos, expansion modules, write-blockers, and accessories
Ditto Field Kit "L" Soft side zipper case This highly-portable kit includes slots for a Ditto, up to two pocket drives for target storage, a CD/DVD reader, accessories, and a Media WriteBlocker

 

Free feature updates

Make sure you have the most current features by downloading the latest Ditto Firmware.

NOTE: The WiebeTech Ditto Forensic FieldStation and its browser-based interface have been fully analyzed and verified to not be susceptible to either the Heartbleed bug or the Shellshock security hole. 

 

Test drive a Ditto today

Take advantage of our unique ability to take control of an online demo unit!

    • Corporate security, law enforcement, military applications
    • Discover, preview, and image files from hard drives and network file systems
    • Physical Imaging of complete hard drives
    • Automatic Logical Imaging of specific file types from hard drives and network file systems
    • Fully networked remote operation
    • Free feature upgrades (Download the latest Ditto® firmware.)
    • Rugged, all-metal, silent, and fan-free construction
    • Free 3-year warranty and no annual fees

Included Items

  • AC adapter & power cord
  • (3) Unitized SAS/SATA-to-eSATA + MiniFit power cables
  • IDE cable
  • Legacy power cable
  • Ethernet cable (RJ45)
  • Legacy-to-SATA power adapter
  • (2) eSATA cables
  • (6) Velcro cable wraps
  • SD card (pre-installed)
  • Quick start guide

Frequently Asked Questions


Documentation and Downloads

Empty Ditto Carrying Case
Ditto Carrying Case (Pelican 1450); custom foam for 1 Ditto or Ditto DX & 4 exp. modules
Kit D0: empty
part #: 31310-0000-0060
$299
Ships in: 3-5 Days
Ditto Network Tap Module
Captures network traffic, internet activity, VOIP, etc.
Compatible with Ditto or Ditto DX
part #: 31030-1577-0000
$499
Ships in: 1-2 Days
USB Ditto Expansion Module
Add support for USB Drives to Ditto
For USB 3.x storage devices
part #: 31030-1589-0000
$99
Ships in: 1-2 Days
Ditto PCIe adapter bundle
Includes adapter for M.2 (PCIe/NVMe or SATA-based) SSDs, PCIe x16 slot adapter, & mSATA to SATA adapter
For Ditto 1
part #: 30090-0000-0001
$65
Ships in: 3-5 Days
CD/DVD Reader for Ditto
Optical drive for reading CDs and DVDs using Ditto DX
Bus powered with Ditto DX
part #: 30000-0100-0000
$75
Ships in: 3-5 Days
Adapter Bundle #7
Includes 7 adapters compatible with v5/v5.5/6 docks, Drive eRazer Ultra, and Ditto
2.5in & 1.8in IDE, ZIF, mini PCIe, mSATA, MBA2010
part #: 31100-0000-0009
$344
Ships in: 3-5 Days
Ditto Protective Cover
Ditto Protective Cover - silicone glove for protecting a Ditto Forensic FieldStation when not in use
part #: 3003-0000-06
$14
Ships in: 1-2 Days
Encryptor
AES 256-bit encryption adapter accessory; works with v5/v5.5 Docks or Ditto products to encrypt attached drives
Encryption keys included
part #: 31010-0430-0000
$190
Ships in: 3-5 Days

No encryption keys
part #: 31010-0430-0001
$179
Call 1-360-816-1800 or email us for ordering information for this item
Encryptor Cable Kit
Encryptor Cable Kit, includes cables for using Encryptor with various third-party products
part #: 7100-3000-01
$25
Ships in: 3-5 Days
SATA cable
Data/power combo cable; eSATA + MiniFit; for Ditto, Drive eRazer Ultra, v5/v5.5 docks, or LabDock U5/S5
part #: 7381-0000-09
$11
Ships in: 1-2 Days
AC power adapter, model PWR-12
12V 3.3A 40W 100-240VAC; barrel connector 2.5x5.5 center positive; for Ditto
US plug
part #: 30010-0000-0012
$43
Call 1-360-816-1800 or email us for availability

UK plug
part #: 30011-0000-0012
$43
Call 1-360-816-1800 or email us for availability

EU plug
part #: 30012-0000-0012
$43
Call 1-360-816-1800 or email us for availability

AU plug
part #: 30013-0000-0012
$43
Call 1-360-816-1800 or email us for availability
AC power adapter, model PWR-16
12V 5A 60W 100-240VAC; barrel connector 2.5x5.5 center positive; for Ditto or Ditto DX
US power cord
part #: 30010-0000-0016
$54
Call 1-360-816-1800 or email us for availability

UK power cord
part #: 30011-0000-0016
$54
Call 1-360-816-1800 or email us for availability

EU power cord
part #: 30012-0000-0016
$54
Call 1-360-816-1800 or email us for availability

AUS power cord
part #: 30013-0000-0016
$54
Call 1-360-816-1800 or email us for availability

Need help? Talk with our sales team.

Interested in speaking to a WiebeTech representative about your needs? We’re here to help you find the forensic device that fits your requirements.