OpenText™ Tableau™ Forensic TX1 Imager User Guide This guide presents a wide range of technical information and procedures for using the Tableau Forensic TX1 Imager. ISTX210300-UGD-EN-1 OpenText™ Tableau™ Forensic TX1 Imager User Guide ISTX210300-UGD-EN-1 Rev.: 2021-July-16 This documentation has been created for OpenText™ Tableau™ Forensic TX1 Imager 21.3. It is also valid for subsequent software releases unless OpenText has made newer documentation available with the product, on an OpenText website, or by any other means. Open Text Corporation 275 Frank Tompa Drive, Waterloo, Ontario, Canada, N2L 0A1 Tel: +1-519-888-7111 Toll Free Canada/USA: 1-800-499-6544 International: +800-4996-5440 Fax: +1-519-888-0677 Support: https://support.opentext.com For more information, visit https://www.opentext.com Copyright © 2021 Open Text. All Rights Reserved. Trademarks owned by Open Text. One or more patents may cover this product. For more information, please visit https://www.opentext.com/patents. Disclaimer No Warranties and Limitation of Liability Every effort has been made to ensure the accuracy of the features and techniques presented in this publication. However, Open Text Corporation and its affiliates accept no responsibility and offer no warranty whether expressed or implied, for the accuracy of this publication. Table of Contents 1 Preface ........................................................................................ 7 1.1 Drive capacity and transfer rate measurement conventions .................. 7 2 Overview ..................................................................................... 9 2.1 TX1 kit contents .............................................................................. 12 2.2 Navigating TX1 ............................................................................... 13 2.2.1 Home screen .................................................................................. 14 2.2.2 Side navigation menu ...................................................................... 15 2.2.3 Jobs tab ......................................................................................... 16 2.2.4 Job status ....................................................................................... 18 2.2.5 Quick Reference Guide ................................................................... 21 2.3 Reading the status LEDs ................................................................. 21 2.4 Interpreting audio feedback .............................................................. 21 2.5 On-screen warnings ........................................................................ 22 2.6 USB keyboard support .................................................................... 22 3 Configuring TX1 ....................................................................... 23 3.1 Startup sequence ............................................................................ 23 3.2 Configuring TX1 .............................................................................. 23 3.2.1 System settings .............................................................................. 23 3.2.2 Network settings ............................................................................. 26 3.2.2.1 Configuring 802.1X network authentication ....................................... 28 3.2.2.2 HTTPS certificate setup ................................................................... 32 3.2.3 Default settings ............................................................................... 33 3.2.4 User management ........................................................................... 35 3.2.5 Locking the system ......................................................................... 38 3.2.6 Updating TX1 firmware .................................................................... 39 3.3 Media utilities .................................................................................. 42 3.3.1 Content breakdown ......................................................................... 42 3.3.2 Wiping destination or accessory drives ............................................. 45 3.3.2.1 NIST 800-88r1 Compliance .............................................................. 51 3.3.3 Formatting destination and accessory drives ..................................... 52 3.3.4 Tableau encryption management ..................................................... 53 3.3.5 Encryption unlock ............................................................................ 55 3.3.5.1 Opal encryption ............................................................................... 55 3.3.5.2 BitLocker encryption ........................................................................ 56 3.3.5.3 APFS encryption ............................................................................. 57 3.3.6 Disabling drive capacity limiting configurations .................................. 58 3.3.6.1 Volatile HPA removal ...................................................................... 59 3.3.6.2 Non-volatile HPA/DCO/AMA removal ............................................... 60 3.3.7 Blank checking ................................................................................ 62 ISTX210300-UGD-EN-1 User Guide iii Table of Contents 3.3.8 Browse filesystem ........................................................................... 64 3.3.9 SMART data ................................................................................... 65 3.3.10 Export ............................................................................................ 66 3.3.11 Eject ............................................................................................... 68 3.4 Connecting drives ........................................................................... 69 3.4.1 Source drives .................................................................................. 69 3.4.2 Destination drives ........................................................................... 70 3.4.3 Accessory drives ............................................................................. 70 3.4.4 Drive detection ................................................................................ 70 4 Using TX1 ................................................................................. 73 4.1 Navigating TX1 features and options ................................................ 73 4.1.1 Home screen .................................................................................. 73 4.1.2 Jobs screen .................................................................................... 73 4.1.3 Side navigation menu ...................................................................... 73 4.2 Preconditions checking .................................................................... 74 4.3 Duplicating ..................................................................................... 74 4.3.1 Cloning ........................................................................................... 74 4.3.2 Imaging .......................................................................................... 75 4.3.3 Performing a duplication .................................................................. 75 4.3.3.1 Files created during disk-to-file duplication ........................................ 84 4.3.4 Using automated acquisition ............................................................ 85 4.3.5 Duplication over a network ............................................................... 93 4.3.5.1 Adding an iSCSI target .................................................................... 93 4.3.5.2 Adding a CIFS share ....................................................................... 99 4.3.6 Pausing and resuming a duplication job .......................................... 107 4.4 Hashing ........................................................................................ 114 4.5 Logical imaging ............................................................................. 118 4.5.1 Performing a logical image acquisition ............................................ 119 4.5.2 Include/exclude criteria .................................................................. 129 4.5.2.1 File type ....................................................................................... 131 4.5.2.2 Path ............................................................................................. 132 4.5.2.3 Folder .......................................................................................... 134 4.5.2.4 File size ........................................................................................ 134 4.5.2.5 File date ....................................................................................... 135 4.5.3 About the logical imaging process .................................................. 135 4.5.3.1 Logical image job status ................................................................ 135 4.5.3.2 Files created during logical imaging ................................................ 137 4.5.3.3 Logical image verification ............................................................... 138 4.5.3.4 Advanced logical imaging setup ..................................................... 138 4.5.4 File extensions .............................................................................. 139 4.5.5 Folders ......................................................................................... 141 iv OpenText™ Tableau™ Forensic TX1 Imager ISTX210300-UGD-EN-1 Table