Logicube F-FALCON-SA User Manual

QUICK START
Logicube Forensic Falcon™ User’s Manual 22
1. Select Hash from the types of operation on the left side.
2. Tap the Modes icon and select the desired mode (Drive Hash or Case
Verify).
3. Tap the Drives or Case icon and select the drive(s) or case to be hashed
or verified then tap the OK icon.
4. Tap the Settings icon to select the hash method or algorithm (or to
select verifying the Primary hash or both hashes). Choose from SHA-1,
SHA-256 or MD5 (SHA-1 or SHA-256 are the recommended algorithms).
5. Change any of the optional settings (LBA settings or percentage of the
drive to be hashed) if needed.
6. Optional: Tap Case Info to set the Case/File Name, Case ID, Examiner,
Evidence ID, or Case Notes.
The Falcon will convert any non-POSIX portable characters used in
Case/File Name field to underscores “_“ when creating the log or
file names.
POSIX portable characters are:
Uppercase A to Z Period (.)
Lowercase a to z Underscore (_)
Numbers 0 to 9 Hyphen/Dash (-)
7. Tap the Start icon to start the hash task.
8. When finished, the status will show “COMPLETED”. At this point, it is
recommended to tap Reset Task to reset the task, and also to delete the
task in order for the drive bays to be properly reset and not show as
being used or assigned for other tasks to be configured.
3.3 Wipe/Format
Destination drives can be wiped and formatted using the Falcon. When a drive
is wiped, there will be no file system on the Destination drive. The Destination
drive must be formatted in order for it to have a valid file system so it can be
used as a Destination drive when using the Drive to File or File to File modes of
imaging. The following methods are available in the Wipe menu:
 Secure Erase – Sends a command to the drive instructing it to wipe the drive based on
the hard drive manufacturer’s specifications for the Secure Erase command.
If errors appear when performing Secure Erase, contact the drive
manufacturer to check if the drive supports Secure Erase. For Secure Erase
specifications (what happens when the drive receives the Secure Erase
command), contact the drive manufacturer.
 Wipe Patterns – Allows the user to set a specific pattern to use for wiping the drive.
The number of passes is customizable (up to 7 passes) along with the type of data
written for each pass. In addition, a 7-pass DoD wipe can be set with pre-selected pass
values.

Logicube F-FALCON-SA Specifications

General

Brand	Logicube
Model	F-FALCON-SA
Category	Storage
Language	English