Talon Ultimate


Exceptional Performance, Features & Reliability

The Talon Ultimate delivers advanced, high-performance forensic imaging at unbeatable imaging speeds of over 40GB/min*. Designed for field or forensic lab use, the product features a compact footprint, user-friendly navigation, and a budget-friendly price. The Talon Ultimate continues the proud legacy of previous generations of the Talon forensic imaging solutions. Engineered specifically for digital forensic investigators, the Talon Ultimate meets all of your forensic imaging, hashing and wiping requirements

  • Fast forensic imaging at speeds over 40GB/min*
  • Image & verify from 1 source drive to 3 destinations
  • Supports imaging from PCIe SSDs (M.2 NVMe, AHCI, SATA type) and PCIe and mini-PCIe cards
  • Secure sensitive evidence data with whole disk, open standard, drive encryption using the NIST recommended XTS-AES-256 cipher mode, decrypt using Falcon-NEO or Veracrypt, decrypt using the Talon Ultimate or open source software such as VeraCrypt
  • Optional Multi-Task feature provides multi-source to multi-target imaging for simultaneous imaging of up to 5 source drives
  • Optional targeted/logical imaging feature allows you to create a logical image and capture only specific files needed
  • Remote operation with a web-based browser interface
  • Image from SAS/SATA/FireWire®/USB 3.0. IDE, PCIe M.2 (NVMe/SATA/AHCI), eSATA, mSATA, micro SATA, and flash drives with optional adapters

Features :

Extremely Fast Imaging
The Talon Ultimate provides extremely fast forensic imaging at over 40GB/min*.

 Multiple Image Formats
The Talon Ultimate images and verifies to the following formats: native or mirror copy, dd image, e01, ex01 (e01 and ex01 with compression).

The Talon Ultimate supports SHA1, SHA256 or MD5 hash and dual hash (MD5+SHA1) authentication.

Write-Protected Source Ports

  • 1 SATA
  • 1 USB 3.0 (can be converted to SATA using an optional USB to SATA adapter)
  • 1 FireWire
  • 1 additional SATA source port can be activated with the purchase of the Multi-Task option.

Destination Ports

  • 2 SATA
  • 1 USB 3.0 (can be converted to SATA using an optional USB to SATA adapter)
  • 1 FireWire
  • Built-in support for SAS, SATA, FireWire, and USB drives out of the box

The Talon Ultimate formats destination drives to NTFS, EXT4, FAT32 or exFAT file systems. The unit supports imaging from source drives formatted to any major file system.

USB Ports
A Gigabit Ethernet port for network connectivity is built-in. The unit includes a USB 3.0 device port for drive preview (with the purchase of the optional USB 3.0 Device Port activation software) and two USB 2.0 host ports for keyboard, mouse and printer connectivity.

Multi-Task Option
This option adds 1 additional SATA/SAS-ready source port and allows you to image from multiple source drives to multiple destinations simultaneously. This option also provides support to image one drive while hashing and/or wiping a second drive simultaneously. Users can perform up to 5 tasks concurrently.

This feature provides the ability to image to or from a network location. Use the Talon Ultimate to image to a network repository using CIFS protocol and/or image from a network repository using iSCSI. Users can use iSCSI as a source or destination drive. Also features a network “Push” function to push evidence files from destination drives connected to Talon Ultimate to a network repository.

Image from a desktop or laptop PC
This feature allows you to image without removing the hard drive from the PC or laptop. Create a forensic bootable USB flash drive that allows the user to image a source drive from a computer on the same network without booting the computer’s native operating system. Requires our USB boot client software (available in our Knowledge Base on our website). Supports imaging from Surface Pro 4 laptops.

Image From a MAC™ 
Image from a MAC™ system booted in “target disk mode” using the write-blocked FireWire port on Talon Ultimate (requires the purchase of the FireWire option). The MAC’s internal drive is seen as a “source” drive. MACs with either FireWire or Thunderbolt ports can be connected to the Talon Ultimate, a Thunderbolt to FireWire adapter is required. MAC As A Source Drive Application Note. 

Web Browser/Remote Operation
An easy to use and intuitive interface allows you to connect to the Talon Ultimate from a web browser and manage all operations remotely. The browser features automatic page scaling for iPad type devices.

Broad Interface Support
Built-in support for SATA/USB3 storage devices. SAS and FireWire devices are supported with the purchase of software options. 2.5″/3.5″ IDE drives are supported with an adapter included with Talon Ultimate. Support for 1.8″ IDE and 1.8″ IDE ZIF, microSATA, eSATA, mSATA and flash drives is available with optional adapters.

Wipe up to DoD specifications or use Secure Erase to erase drives, wipe at speeds up to 27GB/min. 

Error Granularity Setting
Drive error handling is enhanced with a configurable error granularity feature. When a bad sector on the source drive is found Talon Ultimate will, by default skip that sector. Changing the granularity allows more sectors to be skipped. There are 3 options ( 512 Bytes, 4096 Bytes, 64 KIB,). As an example, if 4096 Bytes is chosen, and one of the 8 sectors in that cluster size contains a bad sector, the Talon Ultimate will skip the entire cluster (or 4096 bytes or 8 sectors).

PCIe Support
Support for imaging from M.2 PCIe (SATA, AHCI and NVMe types), PCIe and mini-PCIe express cards are available using the Talon Ultimate’s PCIe port and optional adapters.

Write-blocked Drive Preview/Triage
Preview drives connected to Talon Ultimate on a PC with the USB3.0 device port software activation option. Users can also copy files from drives to their PC when this option is enabled. The Talon Ultimate can be used as a write-blocker.

File Browser
Write-blocked preview of drive contents directly on the Talon Ultimate is available using the file browser feature. This provides logical access to source or destination drives connected to Talon Ultimate. Users can view the drive’s partitions and contents, and view text files, PDF, XML, HTML files.

Concurrent Image+Verify
Imaging and verifying concurrently takes advantage of destination hard drives that may be faster than the source hard drive. Duration of total image process time may be reduced by up to half.

Parallel Imaging
Perform multiple imaging tasks from the same source drive to multiple destinations using different imaging formats. Clone to a network location or a destination drive using mirror copy mode while simultaneously imaging in e01 or .dd format to a different destination drive. Requires the purchase of the Multi-Task option.

Optional Targeted/Logical Imaging
The feature allows you to create a logical image using pre-set, custom filters, file signature filters and/or keyword search to capture only the specific files needed. An MFT report can be generated that contains a potential deleted file list. Format output to L01, LX01, ZIP or directory tree. Users can browse and view directly on the Talon Ultimate display, or use a web browser on a PC that is connected to the same network as the Talon Ultimate. Requires the purchase of the Targeted Imaging option.

User Profiles/Configurations
Administrators can save configuration settings and set password-protected user profiles.

Audit Trail Reporting/Log Files
Provides detailed information on each operation. Log files can be viewed on Talon Ultimate or via a web browser, exported to XML, HTML or PDF format to a USB enclosure. Users can print the log files directly from their PC when connected to the Talon Ultimate via a web browser.

Secure sensitive evidence data with whole drive AES 256 bit encryption. Decryption can be performed using the Talon Ultimate or by using a free open source decryption software such as VeraCrypt, TrueCrypt or FreeOTFE (On The Fly Encryption).

ATA Security
Unlock and clone ATA Security locked drives. Temporarily unlock drives and then clone, hash or wipe. Requires ATA Security password to unlock

Drive Trim
Allows the Talon Ultimate to manipulate the DCO and HPA area of the destination drive so that the destination drive’s total native capacity matches the source drive

CD/DVD Blu-Ray
The Talon Ultimate can image CD/DVD/Blu-Ray media by using a USB optical drive connected to the USB port on the Talon Ultimate. Supports multi-session CD/DVDs.

Drive “Time-Out” Feature
Users can set a specific “time-out” for hard drives connected to Talon Ultimate. After a specified amount of idle time, the drive will be automatically put into standby mode, powering down the drives

Network Services
Users can disable various network services such as HTTP, SSH, Telnet, CIFS/NETBIOS, iSCSI Iperf and Ping, for security purposes

Drive Spanning
Capture from one large capacity drive to two smaller capacity drives.

An HDMI port is located on the back of the Talon Ultimate. This port can be used to connect the Talon Ultimate to a projector.

Removable Storage Drive
O/S and audit trail/logs are stored on an internal drive. This drive is easily removed for secure/classified locations

7″ Touch Screen
Uses a capacitive touch screen with an easy-to-use interface that provides easy navigation through all operations. An on-screen keyboard is also included.

HPA And DCO Capture
Detect and capture Host Protected Areas (HPA) and Device Configuration Overlay (DCO) hidden areas on the source (suspect) drive.

Compact Size
The Talon Ultimate is light weight, at 2.0lbs (1.0kg) and features a small footprint of 7.6″W X 2.6″H X 5.5″D (19.0cm X 6.6cm X 13.9cm).

Specifications :

Power Requirements: 12V DC grounded (non-isolated), 11.5AMP
Power Consumption :  <140W w/drives 
Operating Temperature: 0-40C (32-104 F)
Relative Humidity : 20% to 80% (no condensing)
Net Weight :  2.0 lbs (1.0kg)
Dimensions : 7.6”W X 2.6”H X 5.5”D (19.0cm X 6.6cm X 13.9cm)
Agency Approvals: RoHs compliant. FCC Part 15 Class A, CE