FAQs
Logicube Falcon
®
-Neo User’s Manual 149
Q. What file format does Falcon-NEO use when formatting destination drives?
A. Falcon-NEO can format destination drives using the following file systems: EXT4, NTFS, exFAT, or
FAT32.
Q. Does imaging performance slow down when multiple drives are imaged at the same time?
A. Performance is limited by the slowest drive in the configuration, however, there should not be any
significant speed penalty when imaging multiple drives.
Q. Can I encrypt my evidence drives using the Falcon-NEO? How do I decrypt drives encrypted with
Falcon-NEO?
A. The Falcon-NEO provides AES 256 whole drive encryption. Users can choose between three different
cipher modes and can set their own password/key for the encrypted drive. Users can decrypt a drive
that was encrypted with Falcon-NEO by using the Falcon-NEO to decrypt or by using VeraCrypt,
TrueCrypt or FreeOTFE.
Q. Does the Falcon-NEO provide log files?
A. Yes, each operation/task produces a log file. The log file is viewable on the Falcon-NEO screen (or
remotely on a PC) in an HTML format. The log files can be exported to a thumb drive (the Falcon-NEO
will export in XML, HTML and PDF). XML log files can be customized using XML editors. The log files
are stored on the internal hard drive within Falcon-NEO and are accessible by pressing the log file
icon from the left-side navigation bar on the Falcon-NEO screen.
Q. If I am imaging to or from USB enclosures, will the Falcon-NEO’s USB ports power my devices, or will
an additional power source be required?
A. Each of the Falcon-NEO’s USB ports meets the standard specification of up to 5V of power. If your
USB device has higher power requirements an external power source will be necessary. Check with
the manufacturer of your USB device to determine the exact power requirements.
Q. Can the Falcon-NEO image to or from a network destination?
A. Yes. The Falcon-NEO includes two 10GbE (Gigabit Ethernet) network connections. Users can designate
a network share as a source or destination repository using SMB, CIFS, or iSCSI protocols.
Q. What is “Parallel Imaging”?
A. Parallel Imaging allows you to image from the same source drive to multiple destinations using
different imaging formats. For example, an image to one Destination can be performed using E01 and
at the same time, image to another Destination drive using Mirror Image (bit-for-bit). This is useful
when there are multiple teams of investigators (one in a lab and one at another location but
connected to a network) and you also need to provide a copy of the suspect hard drive to those that
require an exact mirror image (for example to an attorney).
Q. Does the Falcon-NEO provide log files?
A. Yes, each operation/task produces a log file. The log file is viewable on the Falcon-NEO screen (or
remotely on a PC) in an HTML format. The log files can be exported to a thumb drive (the Falcon-NEO
will export in XML, HTML and PDF). XML log files can be customized using XML editors. The log files
To Next Page
Loading...
Need help?
General
