Shield-399 unit
Purpose-built hardware with tools, keyword lists, hash lists, and quick-queue buttons configured for the selected deployment.
Configured system
A coordinated toolkit for deployment.
Run supported tools through one coordinated platform, with case and operation context synchronized across paired units.
Dashboard
Pair directly to access the fully configurable dashboard and execution interface. Each unit can provide its own hotspot with QR-code access, or users can connect without Wi-Fi over USB or Ethernet.
Triage
Write-protected file viewing, search, and download make it easy to quickly assess a drive and retrieve selected content.
Multi-unit loadout
Two units. One deeper case.
Nanuk 908 and Pelican Storm iM2075 configurations can support a two-unit loadout. The photographed configuration is packed in a Nanuk 908.
Two operating surfaces
Operate at the unit. Configure and review from the dashboard.
The touchscreen supports direct operation at the media. The local network dashboard provides deeper configuration, case management, status, results, and operational review.
At the unit
Touchscreen operation
Run prepared tools, monitor the queue, and review supported results directly from the Shield-399 unit.
Network dashboard
Configuration, oversight, and review
Configure supported tools and review unit status, active work, cases, results, and operational history.
Interface views and demonstration data shown. Select an interface image to enlarge it.
Program overview
Technical control for leads. Clear execution for operators.
Prepare repeatable operations
Technical leads can save profiles and defaults for recurring or approved procedures.
Operate closer to the media
Authorized operators can quick-run supported tools from the touchscreen with configurable defaults and selectable case context.
Review operational activity
Tool execution history, results, case-related tasks, and data metrics remain available through the dashboard.
Work local-first
Core evidence operations do not require a public-cloud connection.
In operation
A compact operating point for connected media.
The Shield-399 unit brings supported tools to the media and operator—at a desk, in a lab, or in the field.
Review hardware interactionTechnical detail
Explore the capabilities behind the platform.
Focused pages explain supported tools, configuration options, operating boundaries, and technical details.
01
Acquire and preserve
Imaging, extraction, hashing, verification, and source-drive handling.
→ 02Examine and analyze
Drive exploration, keyword and hash analysis, drive health, and encryption management.
→ 03Sanitize and prepare
Destination wiping, verification, and formatting.
→ 04Manage and report
Cases, assignments, execution records, reports, and exports.
→ 05Configure and execute
Profiles, Quick Add, queues, dependencies, progress, and execution records.
→Ordering and procurement
Configure Shield-399 for the deployment.
Choose the Founding Edition or build a custom configuration, then continue to checkout or request an organizational quote.
Product updates
Stay informed about Shield-399.
Receive product, software-release, capability, and availability updates from Shadow and Shield.
Shadow and Shield is operated by daarc, Inc. By subscribing, you agree to receive Shield-399 product emails and can unsubscribe at any time. Read our Privacy Policy.