Ditto DX Forensic FieldStation
Digital investigation, eDiscovery, forensic data acquisition
Image, clone or browse SATA, IDE, USB3, ethernet devices; write to LAN, dual SATA or USB3 targets
| Part Number | 31710-3409-0000 |
| Product Name | Ditto DX Forensic FieldStation |
| SATA Bus Speed | 6G |
| Host (I/O) Ports | (1) IDE/PATA -- source side (2) USB 2.0 -- for peripheral attachment (3) USB 3.0 -- one source, two destination -- up to 5 Gbps (3) eSATA -- one source, two destination -- up to 6 Gbps (3) Gigabit (1000Base-T) Ethernet -- one source, one destination, one GUI access |
| Drive Types Supported | PATA/IDE 2.5" drives PATA/IDE 3.5 SATA 2.5" drives SATA 3.5" drives iSCSI (network attached SCSI) SATA SSD (solid state drives) SAS 2.5" drives SAS 3.5" drives Hitachi 1.8" drives Toshiba 1.8" drives MacBook Air 2010 MSATA Mini PCIe PATA Mini PCIe SATA Mini PCIe USB PCIe/NVMe USB Thumb Drives USB drives via USB cable FireWire drives via FireWire cable |
| Sector Size Compatibility | Compatible with 512n drives as well as Advanced Format 4Kn and 512e type drives |
| Supports S.M.A.R.T. disk info | Yes |
| Number of LEDs | 15 |
| Description of LEDs | LED for each data connection (lit when connected) plus a light bar showing operating status |
| Audible alarm | Yes |
| LCD Screen | Four-line backlit LCD controlled with four soft-touch menu navigation buttons. Browser-based Ditto interface allows for direct operation, remote operation, and administration. |
| LCD Info | 4 lines x 20 characters width |
| LCD Backlight | Yes (backlighting can be disabled using stealth switch) |
| Stealth Mode | Disables all light output (LEDs/LCD). LCD readable with night-vision goggles. |
| Navigation menu | LCD/button driven menu system |
| Web admin interface | Operable from a web browser |
| Operating system compatibility | Windows XP or later Mac OS X 10.4.x or higher iOS Tablets/phones Android Tablets/phones Most versions of Linux |
| Browser compatibility | Internet Explorer Firefox Safari Chrome Opera |
| Detects/reports HPA/DCO | Yes |
| Allows HPA/DCO override | Temporarily or permanently remove HPA/DCO |
| Fan(s) | Fanless design |
| Construction material(s) | All-aluminum construction |
| Ambient Humidity Range | 5% to 95%, non-condensing |
| Power switch | 2 position: On / Off |
| Power input | 60W 12V 5A DC |
| Power input connector | Barrel connector (center pin positive) |
| Dimensions | 4.92" x 6.77" x 1.72" (125mm x 172mm x 43.7mm) |
| Weight | 5.00 lbs. (2.27 kg) |
| Write Blocking | Yes (source side) |
| Write Blocked ports | eSATA (SATA), PATA/IDE, USB 3.0; other input types and drive types supported with Ditto Expansion Modules or drive adapters |
| Hashing | Yes |
| Hashing info | None, MD5, SHA-1, SHA-256, MD5 + SHA-1, MD5 + SHA-256. Hash types are hardware-accelerated; can hash during image or clone. |
| Erase modes | Clear Partition Table, Quick Erase, Custom Erase, Secure Erase Normal, Secure Erase Enhanced, DoD Clear, DoD Sanitize, NIST800-88 Clear, NIST800-88 Purge |
| Image/clone output modes | Single Drive Image, Single Drive Clone, Image and Clone, Image to mirrored disks, Clone to mirrored disks |
| Compliance | FCC, UL, CE, RoHS, RCM, TAA |
| Warranty | CDSG provides a 3-year limited warranty for this product. |
| Technical Support | Your investment our product is backed up by our free technical support for the lifetime of the product. If you need to contact us for any reason, visit our website. |
About Ditto DX Forensic FieldStation
 |
 |
Next-generation imaging
The Ditto DX Forensic FieldStation has been optimized for various forms of media, including SATA SSDs, NVMe/PCIe SSDs, hard drives, SD and CF cards, and others.
Compromise-free peripheral management
Ditto DX improves on the original Ditto with an additional control interface that sports dedicated Ethernet and USB ports for remote access and connecting peripherals. What's more, this frees the USB and Ethernet ports that were meant for imaging and capturing data to be used only for those purposes.
Time-saving Logical Imaging
With hard drives and networked file shares exploding in size, Logical Imaging is more important than ever. Ditto DX Logical Imaging performance is twice that of the original Ditto device. And with automatic, pre-selected search and acquire capability, Ditto DX slashes the time it takes to capture needed evidence. You can also create your own search and collection scripts for an even more targeted approach.
Remote operation
An easy-to-use web browser interface supports remote operation via network or VPN, providing access to Ditto configuration, user administration and user rights, as well as direct operation of Ditto cloning and imaging operations.
Create logical and physical images in the field
The built-in menu system makes it easy to configure and perform forensic captures without an attached computer. Optionally, attach a computer for additional options such as generating complete listings of drive or file system contents to facilitate discovery, or automatically capture specific file types.
Source Inputs (write-blocked)
Ditto natively supports many write-blocked inputs: SATA, eSATA, PATA, USB3.x/2.0. Additional acquisition interfaces are available via expansion modules, such as the Ditto SAS Expansion Module, Ditto FireWire Expansion Module, and Ditto Network Tap Module.
Destination Outputs
Use dual SATA outputs simultaneously with same performance as one eSATA (single, dual and mirrored). Images can also be output to large volumes, including NAS and other network destinations, as well as portable RAID enclosures.
Data Acquisition Modes
Clone, DD, E01, L01 with MD5, SHA-1, or SHA-256 hashing. Ditto DX also offers a combined mode that captures a clone and DD or E01 (to different destination drives) in a single pass reading of the suspect drive.
Pause and Resume
The Ditto family of imagers was the first to include a pause and resume feature. When creating a Physical Image DD, the investigator may pause the imaging process, disconnect everything for secure storage and then come back later to resume the image without losing any previous work.
Image Restore
Restore an image to a Destination drive to create a bootable clone of the original drive.
S.M.A.R.T. and hdparm Data
Ditto DX allows investigators to collect S.M.A.R.T and hdparm data for any connected device.
Hard Drive Password Lock/Unlock and Encryption
Ditto DX automatically identifies drives that are firmware password protected. The investigator may enter the password, if known, to unlock the drive. Ditto DX also supports whole disk encryption using the AES 256 OPAL encryption schema. If known, the investigator can enter the passphrase to decrypt the drive for imaging.
PCIe Support
Ditto DX supports imaging NVMe drives and using NVMe drives as a Destination device. Additionally, other PCIe devices can be accessed using PCIe adapters.
Complete and Secure Erasure
Ditto DX is capable of sanitizing drives with preset erase modes or a user configurable pattern. NVMe devices and other drives can be securely wiped using a variety of sanitization modes including DOD Clear and Sanitize modes plus NIST800-88 Clear and Purge. The drive can also be formatted after the erase is complete.
Water-resistant, dust-proof Pelican® custom carrying case available
Convenient, customized field kits are available for Ditto and accessories.
| Model | Case Type | Description |
|---|---|---|
| Ditto Field Kit DX | Pelican 1450 | This kit holds a Ditto DX and up to four Ditto Expansion Modules. The carrying case is available empty or with various tools included for forensic investigations, including a Forensic UltraDock and Forensic ComboDock. |
| Ditto Field Kit K-DX | Pelican 1510 | Also known as "Quad Ditto Carrying Case," this rolling, dust-proof, water-resistant case features custom foam with slots for up to 4 Ditto DX's, expansion modules, write-blockers, and accessories |
| Ditto Field Kit L-2 | Soft side zipper case | This highly-portable kit includes slots for a Ditto DX, up to two pocket drives for target storage, a CD/DVD reader, accessories, and a Media WriteBlocker |
Test drive a Ditto DX today
Take advantage of our unique ability to take control of an online demo unit!
- 2x Logical Imaging performance
- Native USB 3.0 connectivity
- Rugged, all-metal, silent fan-free construction
- Free 3-year warranty and no annual fees
Included Items
- AC adapter & power cord
- (3) Unitized SAS/SATA-to-eSATA + MiniFit power cables
- IDE cable
- Legacy power cable
- Ethernet cable (RJ45)
- (2) eSATA cables
- (6) Velcro cable wraps
- SD card (8GB, pre-installed)
- Quick start guide
Frequently Asked Questions
Documentation and Downloads
Product Video
Ditto Field Kit DX
Our Forensic Field Kits come with a variety of write blockers, drive docks, or drive imagers to fit a digital investigator's needs. Each field kit offers a few standard configurations, but can be customized further. Forensic Field Kit DX offers slots for a Ditto® DX drive imager, either four expansion modules or drive docks, Ditto Breeze, and cabling.
Ditto Breeze
This accessory fan for Ditto® DX keeps the drive imager cool in high temperature environments.
Ditto Network Tap Module
Quickly add network data capture to a Ditto® drive imager. With the NetTap Module, it's easy to capture network traffic, internet activity, and VOIP with your Ditto or Ditto DX.
Ditto FireWire Expansion Module
Quickly add write blocked FireWire to a Ditto® drive imager.
Ditto SAS Expansion Module
Quickly add write blocked SAS support to a Ditto® or Ditto DX drive imager.
DVD/CD Reader for Ditto Forensic FieldStations
Add the DVD/CD Reader to a Ditto® drive imager to examine optical data discs.
Encryptor, AES256
The Encryptor, AES256 offers in-line SATA hard drive encryption. The military-grade hardware-base encryption is done in real-time and controlled with the unique physical encryptor key.
Ditto x86 BE
| Ditto DX Forensic FieldStation
Image, clone or browse SATA, IDE, USB3, ethernet devices; write to LAN, dual SATA or USB3 targets |
|||||||||||||||||||
| US plug part #: 31710-3409-0000 |
$2249 Ships in: 3-5 Days |
||||||||||||||||||
| UK plug part #: 31711-3409-0000 |
$2249 Ships in: 3-5 Days |
||||||||||||||||||
| EU plug part #: 31712-3409-0000 |
$2249 Ships in: 3-5 Days |
||||||||||||||||||
| AUS plug part #: 31713-3409-0000 |
$2249 Ships in: 3-5 Days |
||||||||||||||||||
| Ditto Field Kit DX
Ditto Carrying Case (Pelican 1450); custom foam for Ditto DX & 4 exp. modules |
|||||||||||||||||||
| Kit DX2: includes Ditto DX, FUDv6, FCDv6, accessories, AUS plugs part #: 31313-3409-0063 |
$3199 Ships in: 3-5 Days |
||||||||||||||||||
| Kit DX1: includes Ditto DX & accessories; US plug part #: 31710-3409-0061 |
$2399 Ships in: 3-5 Days |
||||||||||||||||||
| Kit DX1: includes Ditto DX & accessories; UK plug part #: 31711-3409-0061 |
$2399 Ships in: 3-5 Days |
||||||||||||||||||
| Kit DX1: includes Ditto DX & accessories; EU plug part #: 31712-3409-0061 |
$2399 Ships in: 3-5 Days |
||||||||||||||||||
| Kit DX1: includes Ditto DX & accessories; AUS plug part #: 31713-3409-0061 |
$2399 Ships in: 3-5 Days |
||||||||||||||||||
| Kit DX2: includes Ditto DX, FUDv6, FCDv6, accessories; US plugs part #: 31310-3409-0063 |
$3199 Ships in: 3-5 Days |
||||||||||||||||||
| Kit DX2: includes Ditto DX, FUDv6, FCDv6, accessories; UK plugs part #: 31311-3409-0063 |
$3199 Ships in: 3-5 Days |
||||||||||||||||||
| Kit DX2: includes Ditto DX, FUDv6, FCDv6, accessories; EU plugs part #: 31312-3409-0063 |
$3199 Ships in: 3-5 Days |
||||||||||||||||||
| Kit DX3: includes Ditto DX, FUDv6, NVMe WB, accessories, EU plugs part #: 31312-3409-0064 |
$3299 Ships in: 3-5 Days |
||||||||||||||||||
| Empty Ditto Carrying Case
Ditto Carrying Case (Pelican 1450); custom foam for 1 Ditto or Ditto DX & 4 exp. modules |
|||
| Kit D0: empty part #: 31310-0000-0060 |
$299 Ships in: 3-5 Days |
||
| Ditto Breeze
Compact stand with integrated fan for cooling Ditto DX while operating in extreme environments |
|||
| Powered from USB port on Ditto part #: 30000-0100-0001 |
$49 Ships in: 3-5 Days |
||
| Ditto Network Tap Module
Captures network traffic, internet activity, VOIP, etc. |
|||
| Compatible with Ditto or Ditto DX part #: 31030-1577-0000 |
$499 Ships in: 1-2 Days |
||
| FireWire Ditto Expansion Module
Add support for FireWire Drives to Ditto |
|||
| For FireWire drives (IEEE 1394a & IEEE 1394b) part #: 31030-1582-0000 |
$149 Ships in: 1-2 Days |
||
| Ditto DX PCIe adapter bundle
Includes adapter for M.2 (PCIe/NVMe or SATA-based) SSDs, PCIe x16 slot adapter, & mSATA to SATA adapter |
|||
| For Ditto DX part #: 30090-0000-0002 |
$65 Ships in: 3-5 Days |
||
| CD/DVD Reader for Ditto
Optical drive for reading CDs and DVDs using Ditto DX |
|||
| Bus powered with Ditto DX part #: 30000-0100-0000 |
$75 Ships in: 3-5 Days |
||
| AC power adapter, model PWR-16
12V 5A 60W 100-240VAC; barrel connector 2.5x5.5 center positive; for Ditto or Ditto DX |
|||||||||||||||||||
| US power cord part #: 30010-0000-0016 |
$54 Call 1-360-816-1800 or email us for availability |
||||||||||||||||||
| UK power cord part #: 30011-0000-0016 |
$54 Call 1-360-816-1800 or email us for availability |
||||||||||||||||||
| EU power cord part #: 30012-0000-0016 |
$54 Call 1-360-816-1800 or email us for availability |
||||||||||||||||||
| AUS power cord part #: 30013-0000-0016 |
$54 Call 1-360-816-1800 or email us for availability |
||||||||||||||||||
| SATA/PATA Adapter Bundle
Includes 6 adapters compatible with v5/v5.5/6 docks, Drive eRazer Ultra, and Ditto |
|||
| 2.5in IDE, 1.8in ZIF, mini PCIe, mSATA, MBA2010 part #: 31100-0000-0009 |
$344 Ships in: 3-5 Days |
||
| Ditto Protective Cover | |||
| Ditto Protective Cover - silicone glove for protecting a Ditto Forensic FieldStation when not in use part #: 3003-0000-06 |
$14 Ships in: 1-2 Days |
||
| Encryptor
AES 256-bit encryption adapter accessory; works with v5/v5.5 Docks or Ditto products to encrypt attached drives |
|||||||||||||||||||
| Encryption keys included part #: 31010-0430-0000 |
$190 Ships in: 3-5 Days |
||||||||||||||||||
| No encryption keys part #: 31010-0430-0001 |
$179 |
Call 1-360-816-1800 or email us for ordering information for this item | |||||||||||||||||
| Encryptor Cable Kit | |||
| Encryptor Cable Kit, includes cables for using Encryptor with various third-party products part #: 7100-3000-01 |
$25 Ships in: 3-5 Days |
||
| SATA cable | |||
| Data/power combo cable; eSATA + MiniFit; for Ditto, Drive eRazer Ultra, v5/v5.5 docks, or LabDock U5/S5 part #: 7381-0000-09 |
$11 Ships in: 1-2 Days |
||
Need help? Talk with our sales team.
Interested in speaking to a WiebeTech representative about your needs? We’re here to help you find the forensic device that fits your requirements.