Logicube Forensic Falcon

Logicube Forensic Falcon™ User’s Manual 34
4: Previewing Drives
4.0 Previewing Drives - Introduction
Drives connected to both Source and Destination ports can be previewed. There are 5 different
methods available to preview drive contents with the Falcon:
 Falcon’s native File Browser
 A computer + Falcon’s File Browser
 USB connection to a computer
 SMB protocol (Using a file explorer)
 iSCSI protocol – Source drives only (Using a file explorer)
Drives connected to the Source ports are always write-protected. Previewing the
contents of these drives will not alter the drive or its contents in any way.
Physical
Access
to the
Drive
Logical
Access
to the
Drive
Access
to
Source
Drives
Access to
Destination
Drives
Concurrent
Multi-User
Connection
Concurrent
Multi-
Drive
Access
Use of
Third
Party
Analysis
Tools or
Software
File
Browser
Computer
+ File
Browser
Very
Limited
1
USB
SMB
iSCSI
1
One file at a time must be downloaded to the computer before it can be analyzed.