BlackBox Forensics

Technical Specifications

Hardware Requirements

  • Storage: Any NTFS-formatted medium (flash drive, hard drive, SSD, etc.)
  • Interface: USB (all versions, 3.0 recommended); eSata (all versions)


  • Operating Systems: Microsoft Windows© XP, 7, 8, 2000 server, 2003 server, 2008 server
  • Minimum RAM: 2GB

Data Output

  • DD image format (whole disk collections)
  • Encrypted zip archives in 2GB chunks (targeted collections)
  • Collected Data Encryption: AES 256


  • Tamper-proof configuration
  • Tamper-evident collection process using encrypted MD5 hashes
  • Audit log of collection process
  • Complete file listing, including preserved metadata and MD5 hash (targeted collection only)
  • MD5 Image Hash (whole disk collection only)