154 The Information Company
4.10 Logs module
TX1 generates a detailed log for all forensic jobs and most media utility operations. The
detailed information captured in the logs will depend on the job type. A summary of the
information captured for an image-based duplication job is shown below. See the sample
logs at the end of this section for some specific job log examples.
• Status – Overall job status (Incomplete, Ok, Error/Failed, Cancelled) as well as
date/time stamps, username, job notes, and TX1 unit and firmware version
information.
• Source – Source drive details, including overall drive information (interface type,
make/model number, firmware version, serial number, HPA/DCO/AMA related
information, RAID and encryption information, size/layout information, and the
partition table type), partition details, and, if present and supported by TX1, filesystem
specific information.
• Acquisition Results – Details about the acquisition aspects of the job, including
block start and count numbers, acquisition hash values, and read error information.
• Configuration – Job configuration information, such as the output file format type,
segment size, and whether or not compression was enabled. If logical image
searches are used, the specific search criteria is listed in this section.
Copyright © 2022 Open Text. All rights reserved. Trademarks owned by Open Text.
To Next Page
Loading...