Dell Latitude E6430 ATG User manual

A better, faster way to
acquire digital evidence
Now you can quickly and automatically identify
intelligence or evidence on computers, cell
phones and digital storage. Dell’s semi- and
fully-rugged Latitude™E6430 ATG and Latitude™
E6420 XFR laptops, together with Evidence
Talks’ SPEKTOR®* triage and imaging software,
help users quickly collect and review data from
all types of computers, as well as USB &
FireWire devices. SPEKTOR®Forensic
Intelligence is a fast and forensically sound data
acquisition, analysis and review solution
designed for digital forensics investigators in
high tech crime units, border agencies, special
forces, or other agencies that need to quickly
identify suspect digital evidence.
Make informed decisions
Designed for relatively unskilled users, a unique
touch screen interface guides operators
through capturing and reviewing data in a safe
and controlled manner, enabling informed
decisions in a forensically acceptable way.
Intuitive and comprehensive
Automatic analysis and reporting allows users
to quickly browse and view most common file
formats including images, multi-media, PDFs,
Office®documents, browser activity, e-mail,
chat logs, profile settings, details of previously
attached storage devices, recent file activity,
network setting, installed software and much,
much more.
Built on proven scanning technology from
Evidence Talks Ltd., SPEKTOR®scans target
devices with incredible speed, ensuring
minimum “time on target”. It achieves this
performance by filtering out unwanted
material during the scan.
Existing solutions can be slow and even miss
data because they perform tasks such as
keyword searches or hash matching during
data collection. SPEKTOR®overcomes this by
using the performance of the Latitude™ATG or
XFR. You get to the results faster and without
missing potentially important data.
A uniquely flexible solution
Designed for flexibility in the lab or on target,
SPEKTOR®Collectors can be configured in
seconds to acquire data from Windows®,
Mac or Linux computers via a USB port. The
SPEKTOR®hardware also has write-protected
USB and FireWire ports enabling you to quickly
acquire data from directly connected devices
such as memory sticks, MP3 players, (using the
supplied multi-format card reader) and, using
an adapter, from PATA or SATA hard disks. Each
SPEKTOR®also includes two unique features:
• Remote access: Allows the operator to grant
secure remote access, over any network, to
the SPEKTOR®hardware so that collected
data can be remotely reviewed.
• Remote update: One-click secure internet
update ensures SPEKTOR®always has the
latest capabilities installed.
Dell’s semi- and fully-
rugged Latitude™E6430
ATG and E6420 XFR
Built to withstand pounding rain, blowing
dust and dirt, extreme temperatures,
accidental drops and more, Dell’s semi-
and fully-rugged Latitude™ ATG and XFR
laptops rise to the tough challenges of
the most demanding environments.
Learn more at:
dell.com/forensics
dell.com/semirugged
dell.com/fullyrugged
Fast
Configure and deploy in seconds
Easy to use
Intuitive touch screen interface, reusable
collection profiles
Simple yet comprehensive
“Plug and Go” design can be deployed
by anyone with a few minutes training
Forensically acceptable
Efficient and forensically sound
process, data is captured and
reviewed without compromise
Flexible
Works on PCs, Mac, Tablet PCs and
FireWire devices such as memory
sticks, MP3 players, hard disks and
memory cards
Powerful
Automatically examines data, delivering
detailed results within minutes of capture
Supported
The 24hr** SPEKTOR®support site gives
automated updates, FAQs and access to
trained support experts
Hash Matching
Detects known files quickly using user
defined or imported hash lists
Encryption Detection
Identifies a range of encryption including
PGP Bestcrypt, Truecrypt, Steganography
and Camouflage
* SPEKTOR®is a registered trademark of Evidence Talks Ltd. ** 24hr availability is not guaranteed and is subject to scheduled downtime for maintenance and events outsider of the control of Dell.
Dell Corporation Limited, Reg. No. 02081369, Dell House, The Boulevard, Cain Road, Bracknell, Berkshire RG12 1LF.Pictures are for illustration only. Colour and design details may vary. Microsoft,
MS and Windows are registered trademarks of Microsoft Corporation. Intel, and Intel Core, are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and
other countries.
• Dell’sexclusiveBallisticArmor™Protection System is designed to meet and
even exceed real world and military standards MIL-STD-810G
• PrimoSeal™technology allows for an IP-65 ingress protection rating
•  Q u a d C o o l ™Thermal Management System allows the XFR to meet the
MIL-STD for temperature extremes and enables excellent performance
while running advanced Intel®Core™i5 and i7 processors
Fully-rugged E6420 XFR
SPEKTOR®Mobile Digital
Forensics Intelligence Solution
Semi-rugged E6430 ATG

Features Comments
Forensic Triage supports:
•Computers(PCs,AppleMacsandLinux)
 •Volatilememory(32bitand64bit)
 •USBandotherremovabledevices
 •Memorycards
 •Looseharddisks
 •Cellphones
 •SatellitePhones
 •SatelliteNavigationSystems
Quickly collect and safely review
data from computers and all other
data storage devices without
changing potential evidence.
Collects the contents of volatile
memory (RAM) when performing
live collections from Windows®PCs.
Supports Garmin SAT NAV systems.
Process Driven & Touch Screen Interface Enforces total control and audit of entire triage lifecycle. Collected data is
grouped using easily interpreted icons, representing key and relevant data
collection categories.
Forensically & Evidentially Sound SPEKTOR®incorporates comprehensive and class leading audit logging of all
collection events, user actions and analysis processes, complying with forensic
best practices.
Logical and Intuitive Presentation of Data SPEKTOR®presents results in a clear, accurate and easy to use interface helping you
make informed decisions later.
Create unlimited, reusable collection profiles An easy to use wizard helps the user create powerful profiles that balance collection
speed with effectiveness ensuring they don’t miss vital evidence.
Secure Remote Access Moving from the need to know to the need to share, SPEKTOR®’s unique remote
access feature allows backroom experts to immediately and securely assist front
line users.
Linux GTK Operating System SPEKTOR®runs on an enhanced and secure Linux OS but with its intuitive touch
screen, process driven and user friendly interface, the operator needs no Linux
knowledge at all, SPEKTOR®keeps everything under control.
Forensic Imaging– Physical & Logical Creates forensic images in a variety of proprietary imaging formats such as: EnCase,
FTK, SMART and DD.
Fast Data Collection Our unique ultra-fast collection technology means SPEKTOR®completes connections
within minutes reducing time on target to the absolute minimum.
MacBook – Triage & Imaging Support Often regarded as being notoriously difficult, even for skilled forensic personnel to
image, SPEKTOR®makes it simple to triage and image the latest MacBooks.
User Manual & Help At the touch of a button, the user can read a comprehensive manual, get contact
details for support or select the language for the user interface.
Dynamic Analysis Engine Rapid and fully automatic analysis of collected data which is clearly and
intuitively presented.
Images Supports all image formats with lightning fast gallery view including comprehensive
metadata analysis and searching.
Documents Displays cached pages, history and search terms used in the browsers. Also recovers
account information, passwords & auto-form field entries.
Windows Registry Artifacts - System Info Plays and extracts metadata from all common audio and video formats, including
movies taken with the latest smartphones.
Comprehensive E-mail Review for: MSOutlook(PST&OST),
WindowsLive,Hotmail,EML,MSG,Newmailboxformats
added regularly
Browse, search and review important registry details such as User Accounts, USB
device usage, network settings, most recent file activity, installed software and much,
much more.
Instant ‘web-speed’ searches Searching is not limited to pre-defined keyword lists. All the collected data is indexed
and can be instantly searched to maximize the changes of finding critical data.
Encryption Detection & Password Recovery SPEKTOR®scans all fields collected and will identify a wide range
of encryption including: PGP Bestcrypt, Truescrypt, Steganography
& Camouflage.
Multimedia Browse, filter, sort and view all common office file types. All content is indexed and
instantly searchable.
Indexing & Fast Keyword Searching Results data is rapidly indexed and searched using multiple user defined keyword lists.
Hash Matching Finds known files fast using multiple, user defined hash lists.
Browser Activity Review for: Internet Explorer, Google
Chrome,FirefoxandOpera
SPEKTOR®processes common webmail and office email automatically, presenting
the results just like and email client, making email review brilliantly simple. Everything,
including attachments, are instantly searchable.
Chat Review for: Skype,MSNMessengerandYahoo!Messenger Displays and indexes chat conversations, accounts, passwords
and contacts.
Export Function Users can choose to export all files or just those which have been “tagged” for export.
Exported data includes a separate clear report together with a detailed file listing. Fully
supports import to i2 and similar systems.
SPEKTOR®Forensics Intelligence product features
Semi-rugged ATG
Fully-rugged XFR