Logicube Falcon-NEO User Manual

IMAGING
Logicube Falcon
®
-Neo User’s Manual 49
Example 1: A single keyword
If all filenames with “pic” is desired, the custom filter
would be (similar to *pic* where * are wildcards):
.*(pic)
This will find any file with “pic” in the name like:
mypic.jpg
picture.jpg
baby.pic
Example 2: Multiple keywords
Multiple keywords can be used. If all filenames with “pic”
or “txt” is desired, the custom filter would be:
.*(pic|txt)
This will find all files with “pic” or “txt” in the name.
Example 3: File extension keywords
For file extensions, \. must be placed at the end of the
syntax:
.*\.(pic)
This will find all files with “pic” in the extension such as:
filename.pic
filename.pict
Example 4: File extensions without a wildcard at the end
If a search is desired for a specific filename without any
wildcard afterwards, a $ symbol must be added to the
syntax. Using the example above (in example 3), you can
use the following syntax:
.*\.(pic)$
This will find all files with the “pic” extension and nothing
afterwards. Using the examples above, it will find
“filename.pic” but not “filename.pict”.
4.3.8.3.2 Date Filter

Logicube Falcon-NEO Specifications

General

Brand	Logicube
Model	Falcon-NEO
Category	Laboratory Equipment
Language	English

Summary

Getting Started

Connecting Various Drive Types

Details supported drive types and connection methods.

Quick Start

Quick Start Guide

Provides an overview of Falcon-NEO operations and task execution.

ATA Security Locked Drives

Explains how to unlock ATA security locked drives.

Logs

Viewing and exporting operation logs, including case info and hashes.

Imaging

Imaging - Introduction

Overview of the imaging operation and its selections.

Mode

Selecting the imaging mode from available options.

Source or Case

Selecting the source drive or case for imaging.

Settings

Adjusting various imaging parameters based on the selected mode.

Destination/Image File

Starting the Imaging Operation

Initiating the imaging task and confirming the operation.

Types of Operations

Types of Operations - Introduction

Imaging

Detailed explanation of the Imaging operation and its modes.

Hash / Verify

Performing hash calculations and verification on drives or cases.

Wipe / Format

Erasing, wiping, and formatting destination drives.

Push

Pushing evidence files to network locations or repositories.

Task Macro

Setting up automated sequences of up to nine tasks.

System Settings

Configuring profiles, passwords, encryption, language, display, and notifications.

Network Settings

Editing network configurations, interfaces, and HTTP proxy settings.

Previewing Drives

Drive Encryption and Decryption

Drive Encryption/Decryption - Introduction

Explains whole disk encryption using NIST XTS-AES-256.

Encrypting a Destination

Steps to configure encryption settings and format a destination drive.

Decrypting a Falcon-NEO Encrypted Drive with a Falcon-NEO

Procedures to decrypt drives using the Falcon-NEO itself.

Decrypting a Falcon-NEO Encrypted Drive without a Falcon-NEO

Using third-party utilities like VeraCrypt for decryption.

Updating/Loading/Re-loading Software

Important Notes on Updating/Loading/Re-loading Software

Updating/Loading/Re-loading Software Instructions

Firmware Loading Instructions

Remote Operation

Remote Operation - Introduction

Web Interface

Command Line Interface (CLI)

Viewing Source and Destination Drives over a Network

Viewing Source or Destination Drives Over the Network Using SMB

Viewing Source Drives Over the Network Using iSCSI

USB Boot Client

USB Boot Client Introduction

Creating the USB Boot Client

Using the USB Boot Client

Options

Thunderbolt™ 3/USB-C I/O Card

FireWire Module

Falcon-NEO SCSI Module

USB 3.0 to SATA Adapter

Frequently Asked Questions

FAQs