QUICK START
Logicube Forensic Falcon™ User’s Manual 15
Details on the different screens found in the Imaging operation can be found in
Chapter 5: Imaging.
Definition: Source/Destination/Repository – A Source, Destination, or Repository
can be a drive (Hard Disk Drive, Solid State Drive, USB drive, etc.), Flash media (SD
card, CF card, etc.), or network location.
Falcon uses a concurrent Image+Verify process (Patent pending). When Verify is set, the Falcon
images and verifies concurrently and takes advantage of destination hard drives that may be
faster than the source hard drive. Duration of total image process time may be reduced by up to
half.
Falcon can also perform Parallel Imaging. A user can simultaneously perform multiple imaging
tasks from the same source drive to multiple destinations using different imaging formats. For
example, image to a network location or a destination drive using the E01 format while imaging
to a different destination drive using native/mirror or DD format.
The Falcon imaging, hash, and wipe speeds are determined by several factors
including the following:
- The manufacturer specifications of the drive(s) being used
- The age of the drive (manufactured date)
- How often that drive has been used
For example, a 2 TB drive with 64MB of cache produced by the manufacturer 2
years ago is most likely slower than a 2 TB drive that the same manufacturer just
released this year, even though they are both 7200RPM with 64MB of cache, and
are both SATA III.
To Next Page
Loading...
Need help?
General
