Tool profiles
A technical expert configures a forensic tool once. The saved profile becomes repeatable work that any approved operator can run from the appliance.
Platform Overview
A platform for tools, operators, cases, and results.
Technical users configure tool profiles, set up cases, and review execution history through the network dashboard. Operators run the configured work from the Shield 399 touchscreen. Case context flows between both surfaces so activity, results, and review stay connected.
Touchscreen operation
Field operators run saved tool profiles directly from the touchscreen. Same configuration, same outputs, every operator.
Dashboard review
A network dashboard surfaces queue state, execution history, case activity, and metrics. Accessible from a laptop, tablet, or phone on the approved network — or paired directly to the appliance.
Case and team context
Cases, evidence records, users, organizations, and selected operational metadata can be synced across configured deployments.
Workflow
From connected media to case-attached operational history.
- Phase I
Connect
Attach source, destination, and utility media through configured port roles.
- Phase II
Authenticate
Select the user, case, organization, and saved workflow profile.
- Phase III
Execute
Queue acquisition, analysis, sanitization, cloning, migration, or export jobs.
- Phase IV
Verify
Record hashes, verification outcomes, errors, warnings, and execution state.
- Phase V
Review
Use dashboard views, exports, and reports with per-case operational context.
Operations Log
Tool activity, captured as it runs.
Demonstrative sample entries show how actions, hashes, verification outcomes, and operator context can become reportable case history.
- 14:42:07ZInfoSource media attached on PORT.SRC.01 - read-only enforced
- 14:42:11ZOKOperator authenticated against case profile
- 14:42:18ZInfoAcquisition queued: format E01, hash SHA-256, verify on
- 14:51:44ZOKImage complete - 482.6 GB / 0 errors / SHA-256 verified
- 14:51:46ZInfoKeyword and hash comparison set queued against case index
- 15:14:02ZOKCase record updated - operator, hashes, and execution details retained
Operations Dashboard
Hardware-paired software for case-aware review.
Authorized review on an approved local network. Case context, queue state, execution history, and exportable records are paired with the field unit.
01 / 21
Pre-release Access
Join release updates.
Shadow and Shield is in active development and pre-release testing. Get product progress, launch details, and availability updates from daarc.