IMAGING
Logicube Forensic Falcon™ User’s Manual 49
appear:
One of three different images methods can be selected:
DD – Uncompressed raw image files readable by many
forensic programs.
E01 – Compressed or uncompressed EnCase legacy
evidence file format.
EX01 – Compressed or uncompressed EnCase evidence
file format.
SEGMENT SIZE – Allows the user to set the output segment size
(file size). Choose from 2 GB, 4 GB, 8 GB, 16 GB, or Whole Disk.
COMPRESSION – Available for E01 and EX01 only. Sets the
compression level for E01 or EX01 imaging. When selecting
Compression, the following screen will appear. Use the slider