Sending your message. Please wait...

Thanks for sending your message! We'll get back to you shortly.

There was a problem sending your message. Please try again.

Please complete all the fields in the form before sending.

Please enter a valid email address before sending.

Ditto x86 BE Kit

Digital investigation, eDiscovery, forensic data acquisition

$1399.00 USD

Forensic USB device for booting a computer into the Ditto environment for digital investigation, eDiscovery, and data capture

Part Number 31720-1200-0000
Product Name Ditto x86 BE
Host (I/O) Ports (1) USB 3.2 Gen 1 Type-A connector on BE device. Included hub accessory provides 3 Type-A ports, 1 Type-C (for charging only), and connects to computers via Type-C (or Type-A with adapter).
(1) Gigabit Ethernet port on included USB hub accessory
Web admin interface Browser-based operation and management
Operating system compatibility Requires an x86 64-bit capable processor or better
Construction material(s) Rugged zinc alloy
Bus power Yes
Dimensions 1.74" x 0.66" x 0.31" (44.2mm x 16.86mm x 8mm)
Weight 0.02 lbs. (0.01 kg)
Hashing Yes
Hashing info None, MD5, SHA-1, SHA-256, MD5 + SHA-1, MD5 + SHA-256
Image/clone output modes Single Drive Image, Single Drive Clone, Image and Clone
Compliance FCC, UL, CE, RoHS, RCM, TAA
Warranty CDSG provides a 3-year limited warranty for this product.
Technical Support Your investment our product is backed up by our free technical support for the lifetime of the product. If you need to contact us for any reason, visit our website.

About Ditto x86 BE

No disassembly required - image laptops and ultrabooks

Forensically examine and image the most portable modern devices running Windows, macOS, and Linux without taking them apart via a bootable version of the Ditto environment.


High-speed imaging

Harness your target system's own CPU to image its data. Real-world tests in the lab and in the field have yielded imaging speeds of up to 50GB per minute.


Time-saving logical imaging

Drive capacties are rapidly increasing, making it impractical to image an entire drive, which makes logical imaging more vital than ever. Ditto x86 logical imaging slashes the time required to acquire needed evidence and makes it easy to see what's happening on a drive without imaging every byte first.


Remote operation

The included hub accessory includes a Gigabit Ethernet port to facilitate remote operation. The easy-to-use Ditto web browser graphical interface supports remote operation via network or VPN, providing access to Ditto configuration, user administration and user rights, as well as direct operation of Ditto cloning and imaging operations. 


Data acquisition modes

Clone, DD, E01, L01 with MD5, SHA-1, or SHA-256 hashing. Ditto x86 also offers a combined mode that captures a clone and DD or E01 (to different destination drives) in a single pass reading of the suspect drive.


Pause and Resume

The Ditto family of imagers was the first to include a pause and resume feature. When creating a Physical Image DD, the investigator may pause the imaging process, disconnect everything for secure storage and then come back later to resume the image without losing any previous work.


Image Restore

Restore an image to a Destination drive to create a bootable clone of the original drive.


S.M.A.R.T. and hdparm Data

Ditto x86 allows investigators to collect S.M.A.R.T and hdparm data for any connected device.


Hard Drive Password Lock/Unlock and Encryption

Ditto x86 automatically identifies drives that are firmware password protected. The investigator may enter the password if known to unlock the drive. Ditto x86 also supports whole disk encryption using the AES 256 OPAL encryption schema. If known, the investigator can enter the passphrase to decrypt the drive for imaging.


A USB port for every occassion.

The included hub accessory provides (3) USB Type-A ports, (1) USB Type-C (for charging only), and connects to computers via USB Type-C (or Type-A with adapter). The hub also has a (1) Gigabit Ethernet port to facilitate remote operation.


Complete and Secure Erasure

Ditto x86 can sanitize drives with preset erase modes or a user configurable pattern. NVMe devices and other drives can be securely wiped using a variety of sanitization modes including DOD Clear and Sanitize modes plus NIST800-88 Clear and Purge. The drive can also be formatted after the erase is complete.


Free one-year subscription

Each Ditto x86 comes with a renewable one-year subscription. Receive ongoing technical support and upgrades while your subscription is active. We regularly update the Ditto environment with useful features that our customers request. Plus, we're always available to offer technical support should the need arise.


    • Easily image Windows, macOS, and Linux 64-bit systems without taking the case apart
    • Boot a suspect device into the Ditto environment for digital investigation
    • Palm-sized, rugged, and portable

Included Items

  • (1) Ditto x86 BE Boot Device (Includes 1 Year License)
  • (1) USB Type-C Hub
  • (1) USB Type-C to Type-A Adapter
  • (1) Ethernet Cable
  • (1) Lanyard
  • (1) Carrying Case
  • (1) Quick Start Guide

Documentation and Downloads

Ditto x86 BE Quick Start Guide
Dec 7, 2020 - 276.62 KB
Ditto x86 BE Kit
Forensic USB device for booting a computer into the Ditto environment for digital investigation, eDiscovery, and data capture
BE Kit (Includes 1 Year License)
part #: 31720-1200-0000
Call 1-360-816-1800 or email us for availability
Ditto x86 License Renewal
Extends term of license for Ditto software environment
1-year extension
part #: 30050-0000-0000
Call 1-360-816-1800 or email us for availability

Need help? Talk with our sales team.

Interested in speaking to a WiebeTech representative about your needs? We’re here to help you find the forensic device that fits your requirements.