TD4 Forensic Duplicator


OpenText™ Tableau Forensic TD4 Duplicator

Simplify smaller-scale disk triage, acquisition and media management workloads

According to IDC, 95 percent of investigations have a digital component.1As a result, it is simply not feasible to confiscate a suspect’s device and take it back to the lab for analysis.

Imagine the inefficiency associated with labs stacked floor to ceiling with suspect laptops and computers—devices that investigators would never get the opportunity to analyze.

Digital investigators instead need to forensically acquire the information contained on a suspect device as a forensic image or clone. This must be an exact, bit-by-bit copy that

can be used for evidence analysis. Imaging the device, instead of taking physical custody saves time, money, real estate

and resources.


The OpenText™ Tableau Forensic TD4 Duplicator is

next-generation technology designed as a budget-friendly, easy-to-use solution for standalone forensic acquisitions of common physical media (PCIe, USB, SATA and SAS). TD4 delivers the ideal combination of features and performance to handle smaller-scale triage, acquisition and media

management workloads.

Ease of use

The TD4 retains settings across power cycles, allowing users to start a forensic acquisition with a single click. Administrative controls can also be set to assist more junior investigators, including limiting functionality, ensuring evidence security or guiding a user to a predetermined job configuration.

Maximizing use of resources

Organizations on tight budgets often re-use destination media between cases to save costs. As a suspect source drive is imaged, examiners must ensure the destination media has been wiped clean of any previous case data to prevent cross-case contamination and ensure forensic integrity. Often a separate product is needed to wipe drives, but the Tableau Forensic TD4 Duplicator provides a ‘Reconfigure’ option for users to decide what combinations of actions (wipe, format, encrypt) they want to apply to connected destination media, saving the need for another tool. Both clear and purge disk wipe capabilities are available adhering to NIST standards. Additional wipe configurations are also available to ensure the destination media is ready for reuse. The TD4 can then format a filesystem back on the drive and encrypt it, if desired, making it ready for use in the next investigation. This ‘Reconfigure’ option improves the efficiency of the destination media management process by conducting these operations consecutively rather than as standalone operations.

Corporate applications

In addition to acquisitions from corporate devices, TD4 includes an “IT mode,” which allows the Duplicator to be repurposed for on-site imaging and delivery (for new employee laptops, for example) without the extra steps it normally performs for forensic integrity or chain of custody.




Compact form factor

Portable, ruggedized form factor for easy field use.

Color LCD touchscreen

Easy-to-navigate UI, workflows and realtime drive/job indicators.

Job status indicator

Multicolor indicator for at a glance tracking of job in progress, job completion or job failure status.

Audible feedback

Audible notifications for job completion, job failure or powered or idle (ready for another operation).

Administrator options

Guard against certain TD4 operations and/or settings being misused by less experienced investigators.

Native media support collection

Collect from SATA, SAS, USB, and PCIe drives natively. PCIe hot-swap of both source and destination drives.

Additional media support, such as FireWire (TDA7-9), IDE (TDA7-5) and via Tableau Forensic Adapters.

Disk duplication support

Flexible Disk-to-disk (cloning) and disk-to-file (imaging) capabilities, with output options of up to five destinations per job (1:5) and the ability to combine

clone/image duplication.

Simultaneous hashing

Default to any combination of MD5, SHA-1 and SHA-256 hashing to provide chain of custody when it comes to forensic integrity of evidence.

Detailed logs

HTML logs provide a detailed summary of any operation and connected media.

Partition/file system awareness (FAT32, exFAT,EXT4, HFS+, NTFS and APFS)

Ensure visibility of potentially hidden evidence by detection of different file systems. Enables browsing to provide access to folders and files contained within the file system.

Logical imaging

Capture just files and folders from a given file system.

Standalone hash

Save time by getting a hash calculation without making a complete image.

Restore operations

Return the drive to its original, pre-imaged state from the image file.

Verify operations

Enhance data integrity by verifying that destination and source data match.

AES-256 encryption

Ensure evidence confidentiality with the ability to limit what information can be seen on the destination media.


DCO support

Detect hidden partitions and remove AMA/HPA/DCOs to allow investigators access to evidence that could otherwise go unnoticed.

Local firmware updates

Easily update firmware locally via a USB drive.


accessory port

Enables external keyboard use and facilitates exporting logs.


language support

Support for nine languages: English, Spanish, French, German, Portuguese, Turkish, Chinese (simplified)

and Korean.

Opal encryption support

Detection and notification of the presence of Opal encryption.


Hot swapping—an industry first

Hot swapping drives is not optimized with the standard PCIe bus. However,

the Tableau Forensic TD4 Duplicator is the first product in the industry to enable PCIe hot swap of both source and destination drives. Users can safely eject and swap PCIe drives without the need to power-cycle, saving time and frustration during imaging.

PCIe, SATA and IDE ready

The TD4 is compatible with the Tableau Forensic line of PCIe, SATA and IDE adapters to provide compatibility with a wide variety of source media interfaces, ensuring seamless imaging operations.

The digital forensic tools of choice for government, law enforcement and corporations

Tableau Forensic solutions facilitate digital forensic investigations with imaging, duplication and forensic write-blocking capabilities. They provide the ideal combination of features/performance, affordability, ease of use and portability for both field and lab-based investigations.

Law enforcement, government agencies and corporations around the world have trusted Tableau Forensic as their imaging technology of choice for more than

20 years. As the pioneer in digital forensic investigations, Tableau Forensic

and OpenTextEnCasedigital forensic solutions provide the information advantage needed to help make the world a safer, more secure place by finding the truth in data.

Connectors: Source Side

Drive Power

One Molex Mini-Fit Power Connector for the SATA/ SAS Drive Power


One SATA/SAS (6 Gbps) Signal Connector


One PCIe (10 Gbps) Adapter Connector


One USB 3.2 Gen 1 (5 Gbps) Type-C Connector

Connectors: Destination Side

Drive Power

Two Molex Mini-Fit Power Connectors for the SATA/SAS Drive Power


Two SATA (6 Gbps) Signal Connectors


One PCIe (10 Gbps) Adapter Connector


Two USB 3.2 Gen 2 (10 Gbps) Type-C Connector

Connectors: Misc


DC Input

One Barrel Connector for use with Tableau TP6 Power Supply


One USB 3.2 Gen 1 (5 Gbps) Type-C Connector

Physical / Environmental

DC Output (perdrive)

+5/12V @1A (Continuous)

+5/12V @ 2A (Spin-up)

DC Input

24 VDC (Nominal)

13 VDC (min) to 34 VDC (max)


6.75 in. (L) x 4.6 in. (W) x 1.8 in. (H)


Temperature Range

0 to 40 Degrees C Ambient (room temperature)


18 Watts Typical Operating (not including drive power)

Relative Humidity

Up to 90% (Non-condensing)


Temperature Range

-20 to 70 Degrees C


16 oz (450 g)

Status LEDs


Power LED

White LED Indicating TD4 is powered on


Audio Tones indicate job completion and errors

Status LED

Multi-color LED indicating TD4 Job Status

User Interface



4.95 in. Graphic LCD (480 x 854 Resolution) with Capacitive Touch-screen

Power Button

One Power On/Off Button




Three-years parts and workmanship from date of purchase.

Extended warranty

Two-years extended warranty (five years total) available for purchase.