Simple Imaging. Tactical Triage. Zero Clicks.
IO is a zero-click forensic imaging tool designed for use in high-stress environments. IO automatically enables a software write-block, detects changes to attached devices, and begins producing E01 images from connected target media without any user interaction. Furthermore, IO logs include critical device information that MEDEX (forensic) examiners require such as device type, model, name, size, geometry, MD5 and SHA1 hashes, the hardware serial number, the volume serial number for each partition, and the device VID/PID as applicable.
Additionally, IO was designed from the ground up to enable concurrent data processing and analysis alongside imaging. Without impacting total imaging time, IO produces triage reports that include total file counts and extracted geo-location information from JPEGs. Developers can expand IO’s capabilities through the documented API.
IO source code is available via our Github page.
To request a pre-built Windows binary please fill out the form below.