CN204288207U - A kind of apple MAC system-specific vestige evidence obtaining restorer - Google Patents
A kind of apple MAC system-specific vestige evidence obtaining restorer Download PDFInfo
- Publication number
- CN204288207U CN204288207U CN201420638427.XU CN201420638427U CN204288207U CN 204288207 U CN204288207 U CN 204288207U CN 201420638427 U CN201420638427 U CN 201420638427U CN 204288207 U CN204288207 U CN 204288207U
- Authority
- CN
- China
- Prior art keywords
- interface
- evidence obtaining
- unit
- fixedly installed
- shell
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
Landscapes
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
A kind of apple MAC system-specific vestige evidence obtaining restorer, comprise cube hollow casing, upper surface of outer cover is fixedly installed touch-screen, shell inner cavity is fixedly installed central control system, and central control system is connected with the fixed power source being fixedly installed on the input interface on shell side surface and output interface and being arranged on enclosure by wire.The utility model is needing product allocation to check in batches in the network environment of evidence obtaining, according to network configuration and inspection evidence obtaining rule, generate evidence obtaining client-side program, computing machine to be checked runs, format analysis to subregions such as HFS/HFS+/HFSX is provided, effectively can realize disk vestige deep search, recover and analyze, can automatic wire charging, carry out inspection evidence obtaining work, check complete, close evidence obtaining client-side program, do not affect former network topology environment, do not affect the normal use of tested computing machine, solve the problem that in actual environment, USB interface possibly cannot use.
Description
Technical field:
The utility model relates to electronic equipment, particularly relates to a kind of apple MAC system-specific vestige evidence obtaining restorer.
Background technology:
Apple MAC system and OS X are advanced operating system.Based on rock-firm UNIX basis, simplicity of design is directly perceived, makes the Mac innovated easy-to-use safely everywhere, highly compatible, transcendent.The power of UNIX, the simple OS X of Mac be both simple and easy to and powerful.All-from starting the desktop seen after Mac, to your application program used in everyday, all design to obtain Simple and Chic.No matter be browse network, check mail and nonlocal friend's Video chat, all things are all simply efficient, full of interest.Certainly, simplify complex task and require hard-core technology, and OS X is just having these hard-core technologies.It not only uses solid, the long-tested unix system in basis to provide unprecedented stability, also provides superpower performance, dazzling figure support internet standard.
OS X is based on unix system.Beat the world an employing " object oriented operating system ", comprehensive operating system." object oriented operating system " is that the NeXT company set up after Steve Qiao Busi (Steve Jobs) was forced to leave apple in 1985 develops.NeXT company had been purchased by Apple afterwards.Steve Qiao Busi serves as Apple CEO again, and the Mac OS system that Mac brings into use is incorporated in the Openstep system of NeXT company exploitation.Mac OS X adopts C, C++ and Objective-C programming.Source code is closed in employing.
Along with the high speed development of IT industry, the application of computing machine in people's daily life is more and more extensive, along with the continuous renewal of multimedia technology, the memory space of multimedia messages is also constantly increasing, and increasing data message evidence obtaining will be user's urgent problem.Present stage real-time computer evidence obtaining means mainly comprise two kinds, the first is collected evidence by disk copy, main product has computer forensics product Dossier, Quest-2 of Logicube company, reach and think omnipotent data recovery system (DST Almighty Data Recovery System is called for short D-ARS) etc.; The second is that the mode adopting invasion to implant software is collected evidence, and is similar to virus and preserves the operation vestige of computing machine.
Current system vestige recovers or evidence taking equipment majority is for hard disk or memory device thus carries out copying and the work of fragment reparation; but when this kind equipment docks with the service terminal with operating system; owing to cannot dock with operating system perfection in corresponding device; cause propagation data hourly velocity slow; even there is loss of data, the effect of program recovery cannot be gone out by real embodiment.
Utility model content:
For solving the problem, it is simple that the utility model provides a kind of structure, can dock, realize the technical scheme of the work such as defragmentation, date restoring, disk copy and comprehensive evidence obtaining with the perfection of apple MAC sequence of maneuvers system:
A kind of apple MAC system-specific vestige evidence obtaining restorer, comprise cube hollow casing, upper surface of outer cover is fixedly installed touch-screen, shell inner cavity is fixedly installed central control system, and central control system is connected with the fixed power source being fixedly installed on the input interface on shell side surface and output interface and being arranged on enclosure by wire.
As preferably, central control system comprises system control unit, file defragmentation unit, MAC system evidence obtaining unit, radio network unit and on-the-spot disk copy unit, file defragmentation unit and MAC system to collect evidence after unit serial again with radio network unit and on-the-spot disk copy unit parallel join, file defragmentation unit, MAC system evidence obtaining unit, grid after radio network unit and on-the-spot disk copy unit connect and system control unit connected in series, system control unit and touch-screen, input interface and fixed power source conducting, on-the-spot disk copy unit is conducted by wire and output interface.。
As preferably, input interface comprises ide interface, SATA interface, scsi interface, IEEE1394 interface, USB2.0 interface and USB3.0 interface, ide interface, SATA interface, scsi interface, IEEE1394 interface, USB2.0 interface and USB3.0 interface are fixedly installed on any side of shell on the surface, with the system control unit conducting of central control system.
As preferably, output interface is Broadband Network Interface, and described output interface is fixedly installed on side surface corresponding to the input interface place side surface of shell, with the system control unit conducting of central control system.
As preferably, fixed power source is the two certification power supply of AC100 ~ 240V, exports as 3.5A, is fixedly installed on shell inner cavity lower surface, is connected with power switch button with the system control unit conducting of central control system.
As preferably, also comprise handle, described handle is strip, handle two ends are stiff end, be movable part in the middle of handle, stiff end is fixedly installed on the either side adjacent with input interface on the surface, and intermediate active part is flexibly connected with stiff end, in the handle not used time, movable part is contracted between stiff end.
The beneficial effects of the utility model are;
(1) the utility model is directly connected with tested machine by netting twine, arrange and check evidence obtaining rule, generate client-side program, tested computing machine runs and can carry out inspection evidence obtaining work, process is simple and convenient as single disk evidence obtaining recovers, solves the problem that in actual environment, USB interface possibly cannot use.
(2) the utility model provides and clones and subregion clone the whole dish of disk, support the rapid copy of the storage medium such as hard disk, storage card, USB flash disk, mobile storage, digital camera, Digital Video of the different interface types such as IDE/ATA, SATA, SCSI, USB, IEEE1394 and quick mark analysis, be simple and easy to use, quick and precisely.
(3) the utility model is needing product allocation to check in batches in the network environment of evidence obtaining, according to network configuration and inspection evidence obtaining rule, generate evidence obtaining client-side program, computing machine to be checked runs, format analysis to subregions such as HFS/HFS+/HFSX is provided, effectively can realize disk vestige deep search, recover and analyze, can automatic wire charging, carry out inspection evidence obtaining work, check complete, close evidence obtaining client-side program, do not affect former network topology environment, do not affect the normal use of tested computing machine, solve the problem that in actual environment, USB interface possibly cannot use.
(4) the utility model provides and clones and subregion clone the whole dish of disk, support the rapid copy of the storage medium such as hard disk, storage card, USB flash disk, mobile storage, digital camera, Digital Video of the different interface types such as IDE/ATA, SATA, SCSI, USB, IEEE1394 and quick mark analysis, be simple and easy to use, quick and precisely.
Accompanying drawing illustrates:
Fig. 1 is the utility model structural representation;
Fig. 2 is the utility model input interface detail view;
Fig. 3 is the utility model process flow diagram.
Embodiment:
For making goal of the invention of the present utility model, technical scheme and advantage clearly, below in conjunction with accompanying drawing, embodiment of the present utility model is described in further detail.
As shown in Figure 1-Figure 3, the utility model comprises cube hollow casing 1, shell 1 upper surface is fixedly installed touch-screen 2, shell 1 inner chamber is fixedly installed central control system 3, and central control system 3 is connected with the power interface 6 being fixedly installed on the input interface 4 of shell 1 side surface and output interface 5 and being arranged on shell 1 inside by wire.
Wherein, as core of the present utility model, central control system 3 comprises system control unit 3a, file defragmentation unit 3b, MAC system evidence obtaining unit 3c, radio network unit 3d and on-the-spot disk copy unit 3e.File defragmentation unit 3b and MAC system to collect evidence after unit 3c serial again with radio network unit 3d and on-the-spot disk copy unit 3e parallel join.Grid after file defragmentation unit 3b, MAC system evidence obtaining unit 3c, radio network unit 3d and on-the-spot disk copy unit 3e connect and system control unit 3a connected in series.System control unit 3a and touch-screen 2, input interface 4 and fixed power source 6 conducting.On-the-spot disk copy unit 3e is conducted by wire and output interface 5.
Input interface 4 comprises ide interface 4a, SATA interface 4b, scsi interface 4c, IEEE1394 interface 4d, USB2.0 interface 4e and USB3.0 interface 4f, ide interface 4a, SATA interface 4b, scsi interface 4c, IEEE1394 interface 4d, USB2.0 interface 4e and USB3.0 interface 4f is fixedly installed on any side of shell 1 on the surface, with the system control unit 3a conducting of central control system 3, realize the hard disk with different interface type, storage card, USB flash disk, mobile storage, digital camera, the rapid copy of the storage mediums such as Digital Video and quick mark analysis, be simple and easy to use, quick and precisely.
Output interface 5 is Broadband Network Interface, and output interface 5 is fixedly installed on side surface corresponding to the input interface 4 place side surface of shell 1, with the system control unit 3a conducting of central control system 3.Directly be connected with tested machine by netting twine, arrange and check evidence obtaining rule, generate client-side program, tested computing machine runs and can carry out inspection evidence obtaining work, process is simple and convenient as single disk evidence obtaining recovers.
Fixed power source 6 is the two certification power supply of AC100 ~ 240V, exports as 3.5A, is fixedly installed on shell inner cavity lower surface, is connected with power switch button 7 with the system control unit 3a conducting of central control system 3.
The utility model is applicable to as the occasion requires the fast different operating scene such as vestige acquisition, safety inspection, field investigation evidence obtaining, laboratory forensics analysis.Format analysis to subregions such as HFS/HFS+/HFSX is provided, effectively can realize disk vestige deep search, recovery and analysis, even if delete historical record, system also can being recovered and preserved of efficiently and accurately, and possesses the function of " whom goes out for one piece of unknown reducing disk and when what has done ".
In order to cater to the needs of portability, also comprise the handle 8 of strip, handle 8 two ends are stiff end 8a, be movable part 8b in the middle of handle 8, stiff end 8a is fixedly installed on the either side adjacent with input interface 4 on the surface, intermediate active part 8b is flexibly connected with stiff end 8a, and in the handle 8 not used time, movable part 8b is contracted between stiff end 8a.
Claims (6)
1. an apple MAC system-specific vestige evidence obtaining restorer, comprise cube hollow casing (1), shell (1) upper surface is fixedly installed touch-screen (2), it is characterized in that: shell (1) inner chamber is fixedly installed central control system (3), described central control system (3) by wire be fixedly installed on the input interface (4) of shell (1) side surface and output interface (5) and the fixed power source (6) that is arranged on shell (1) inner is connected.
2. a kind of apple MAC system-specific vestige evidence obtaining restorer according to claim 1, is characterized in that: described central control system (3) comprises system control unit (3a), file defragmentation unit (3b), MAC system evidence obtaining unit (3c), radio network unit (3d) and on-the-spot disk copy unit (3e);
Described file defragmentation unit (3b) and MAC system to collect evidence after unit (3c) serial again with radio network unit (3d) and on-the-spot disk copy unit (3e) parallel join;
Grid after described file defragmentation unit (3b), MAC system evidence obtaining unit (3c), radio network unit (3d) and on-the-spot disk copy unit (3e) connect and system control unit (3a) connected in series;
Described system control unit (3a) and touch-screen (2), input interface (4) and fixed power source (6) conducting;
Described on-the-spot disk copy unit (3e) is conducted by wire and output interface (5).
3. a kind of apple MAC system-specific vestige evidence obtaining restorer according to claim 1, it is characterized in that: described input interface (4) comprises ide interface (4a), SATA interface (4b), scsi interface (4c), IEEE1394 interface (4d), USB2.0 interface (4e) and USB3.0 interface (4f), described ide interface (4a), SATA interface (4b), scsi interface (4c), IEEE1394 interface (4d), USB2.0 interface (4e) and USB3.0 interface (4f) are fixedly installed on any side of shell (1) on the surface, with system control unit (3a) conducting of central control system (3).
4. a kind of apple MAC system-specific vestige evidence obtaining restorer according to claim 1, it is characterized in that: described output interface (5) is Broadband Network Interface, described output interface (5) is fixedly installed on side surface corresponding to input interface (4) the place side surface of shell (1), with system control unit (3a) conducting of central control system (3).
5. a kind of apple MAC system-specific vestige evidence obtaining restorer according to claim 1, it is characterized in that: described fixed power source (6) is the two certification power supply of AC100 ~ 240V, export as 3.5A, be fixedly installed on shell (1) inner chamber lower surface, be connected with power switch button (7) with system control unit (3a) conducting of central control system (3).
6. a kind of apple MAC system-specific vestige evidence obtaining restorer according to claim 1, it is characterized in that: also comprise handle (8), described handle (8) is strip, handle (8) two ends are stiff end (8a), be movable part (8b) in the middle of handle (8), stiff end (8a) is fixedly installed on the either side adjacent with input interface (4) on the surface, intermediate active part (8b) is flexibly connected with stiff end (8a), in handle (8) the not used time, movable part (8b) is contracted between stiff end (8a).
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201420638427.XU CN204288207U (en) | 2014-10-30 | 2014-10-30 | A kind of apple MAC system-specific vestige evidence obtaining restorer |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201420638427.XU CN204288207U (en) | 2014-10-30 | 2014-10-30 | A kind of apple MAC system-specific vestige evidence obtaining restorer |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN204288207U true CN204288207U (en) | 2015-04-22 |
Family
ID=52871344
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201420638427.XU Expired - Fee Related CN204288207U (en) | 2014-10-30 | 2014-10-30 | A kind of apple MAC system-specific vestige evidence obtaining restorer |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN204288207U (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104391758A (en) * | 2014-10-30 | 2015-03-04 | 四川神琥科技有限公司 | Trace evidence taking and recovering equipment special for Apple MAC (media access control) system |
-
2014
- 2014-10-30 CN CN201420638427.XU patent/CN204288207U/en not_active Expired - Fee Related
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104391758A (en) * | 2014-10-30 | 2015-03-04 | 四川神琥科技有限公司 | Trace evidence taking and recovering equipment special for Apple MAC (media access control) system |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN104505552B (en) | A kind of charging method and charging device | |
| CN105338550B (en) | A kind of management method and device of the connection for wireless network | |
| CN104346175A (en) | Back-end application management method and apparatus and terminal device | |
| US10540325B2 (en) | Method and device for identifying junk picture files | |
| CN104636240A (en) | Method for acquiring information report and terminal | |
| CN104484058A (en) | Instant expression image outputting method and instant expression image outputting device | |
| CN105955644A (en) | Screen capture method and mobile terminal | |
| CN204288207U (en) | A kind of apple MAC system-specific vestige evidence obtaining restorer | |
| CN102521167B (en) | USB (universal serial bus) electronic information anti-disclosure memory device and method | |
| CN106067889B (en) | Electronic device and its method for uploading | |
| CN104391758A (en) | Trace evidence taking and recovering equipment special for Apple MAC (media access control) system | |
| CN109299051A (en) | A kind of performance data files management method and relevant apparatus | |
| CN105488060A (en) | File acquiring method, file acquiring device and terminal | |
| CN104991934A (en) | Directory deletion method and apparatus | |
| CN109348041B (en) | Application program networking control method and device, storage medium and terminal | |
| CN204178357U (en) | A kind of Linux/Unix system-specific vestige evidence obtaining restorer | |
| CN204178358U (en) | A kind of WINDOWS system-specific vestige evidence obtaining restorer | |
| CN108073533A (en) | Interface adapter device | |
| CN105975362A (en) | Method for recovering data in fault state of mobile phone | |
| CN104317532A (en) | Multifunctional data destruction machine | |
| CN204242163U (en) | A kind of android system vestige evidence obtaining restorer | |
| CN103942125A (en) | Automatic backup method and system | |
| CN204257203U (en) | A kind of portable data destroyer | |
| CN204946014U (en) | A kind of computer security control system | |
| CN203340237U (en) | Video-acquisition high-speed downloader |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20150422 Termination date: 20191030 |