Logicube Forensic Falcon User Manual

IMAGING
Logicube Forensic Falcon™ User’s Manual 55
o Drive to File
o File to File
 SHA-256 – Uses the SHA-256 algorithm to hash the
Source. This is available in the following modes:
o Drive to Drive
o When using DD method in Drive to File
 MD5 – Uses the MD5 algorithm to hash the Source. This
is available in the following modes:
o Drive to Drive
o Drive to File
o File to File
 SHA-1+MD5 – Dual Hash. Uses both SHA-1 and MD5
algorithms to hash the Source. This is available when
using the following modes:
o When using E01 method in Drive to File
o When using EX01 method in Drive to File
Verification Method – Select YES to hash the Destination and
verify that hash with the selected Source hash.
5.0.3.10 Verify Hash
When File to Drive mode is selected, Verify Hash will appear on
the top-right of the screen.
There is only one setting (Verify Hash) and two choices (Yes or
No). Selecting Yes will instruct the Falcon to verify the hash
value based on the original hash value that was recorded form
the time the drive was imaged (using Drive to File).
Only images created by the Logicube Forensic
Falcon can be used with this setting.

Logicube Forensic Falcon Specifications

General

Brand	Logicube
Model	Forensic Falcon
Category	Storage
Language	English