Cyber Forensic Services

Dealing with your data, bit by bit...




The|BLOCKER

CYBERENSIC'S USB WRITEBLOCKER

This is a software writeblocker designed for the 'Digital Forensics' arena, to assist in the safe TRIAGE and EXAMINATION of USB devices

Latest Release: Version 3.5.2023.8





Graphical User Interface

This release has introduced an attractive and functional new look... When 'Forensic Mode' is enabled... the interface turns cyan in colour, leaving you in no doubt the intergrity of any subsequently connected USB devices and that they are protected from any attempts to write data back to the device. When disabled, an amber warning interface clearly shows you the 'Forensic Mode' has been disabled and that USB devices can now be written to. This application also takes advantage of additional Windows 10 & 11 features, including the 'notification' feature, displaying a message on-screen each time the 'Forensic Mode' is changed, keeping the user in no doubt as to the status of the system and protecting the integrity of any target USB devices.

Simplified functionality...

This application now has a single toggle switch to change between the 2 'Forensic Modes'. The application is designed to automatically start with USB writeblocking enabled and therefore protecting the integrity of any devices that are then connected without any further interaction. To disable USB writeblocking, simply click the switch and the Forensic Mode is disabled. A further 'check box' allows for the user to disable the 'notification' features, keeping the use of this application simple and easy to use.

The latest PROFESSIONAL version now supports USB 3.x adapters, providing protection to the latest SSD devices, such as PCIe M.2 cards, ensuring integrity of evidence during the triage and imaging stages...

Tray Icon Support...

One of the features added to this release is the introduction of the 'Tray Icon'. Not only does this allow you to see if the application is running even when minimised, but it also displays a corresponding coloured icon to indicate the application's current status. When enabled, the Forensic Mode displays a cyan icon whilst a amber icon is displayed confirming that 'Forensic Mode' is now disabled... helping to prevent mistakes when examining USB devices.

Tray icon support allows for the application to continue running in the background and for the 'Forensic Modes' to be toggled with ease. Simply click the tray icon to show or hide the application!

Windows 11 Support (x64)

Designed from the ground up, this application was intended for integration with the latest Windows releases with both x86 and x64 bit architechture compatibility in mind. The underlying code has since been upgraded and remains fully Windows 11 compatible, allowing for continued long term support.

It has been tested on numerous iterations of the Windows environment and provides backward compatibilty for older systems, where needed, but emphasis has been placed on making this a forward looking software writeblocker providing support to future Windows releases...

Elevated 'Administrator' Priviledges...

Upon starting this application, it immediately 'Runs As Administratior', without the need for any other user interaction, elevating the application's priviledges from the moment the application is run. This ensures any changes in 'Forensic Mode' are always applied, as and when selected, mimimising any mistakes and helping to ensure the integrity of any target external USB devices, when required.

The application has also been updated to automatically reset your system, when 'The BLOCKER' is closed, ensuring any further devices connected, can be written to without any further interaction.

Cyber Terminal Included...

Unlike the previous versions of this application, a small terminal screen is visible on the screen integrated into the interface, displaying 'User' and 'Computer' information, as well as a date and time stamp included within the on-screen logging interface. Besides the clear changes in colour, representing the 'Forensic Mode' status, a visual indication is also displayed within the 'Cyber Terminal' when the modes changes to alert you as to the current status.

The|BLOCKER...

Forensic Mode: Enabled

The distinctive cyan interface provides instant feedback as to the status of the system... and giving user assurance that the writeblocking of USB devices has been enabled. The latest release includes a distinctive visual confirmation that all USB 3.x adapters, such as PCIe M.2 SSD cards are additionally protected. To ensure there is no doubt as to the status of a system, the Windows 10 / 11 on-screen notification feature is used to further inform user as to the state.

Note: Version featured: THE|BLOCKER - PRO Edition

Download Now...
The|BLOCKER...

Forensic Mode: Disabled

When de-selected, the entire interface turns amber as a warning that 'Forensic Mode' has been set to 'disabled'. The system is no longer secure and any USB devices subsequently connected can now be written to.

Note: Version featured: THE|BLOCKER - PRO Edition

Download now...

VERSIONS

The BLOCKER is now available in both STANDARD (USB 2.x) and PRO (USB 2.x & USB 3.x) editions



Download THE|BLOCKER... Below!

`

Contact Us at Cyberensics...

If you have any questions or requests, complete the below form and we will get in touch ASAP

Dealing with your data, bit by bit...