Step-By-Step Instructions - Imaging - Logicube Falcon-NEO User Manual

Net Traffic to File – Captures network traffic, internet activity, and VOIP. Sniff data on a
•
network and store captured packets on a Destination drive connected to Falcon-NEO.
Captured data are saved to .pcapng file format.
Drive to Drive – Performs a bit-for-bit copy of the Source producing an exact duplicate
•
of the Source drive. This is also known as a native copy or mirror copy.
File to Drive (Image Restore) – Restores DD, E01, EX01, and DMG images created by
•
the Falcon-NEO to another drive.
DD, E01, EX01, and DMG files created on the Destination may
be smaller than the selected Segment size. For example, if 4GB
segment size selected, some files may be less than 4GB. This
occurs when there is a lot of blank space on the Source drive.
The Falcon-NEO uses a concurrent Image+Verify process. When Verify is set, the Falcon-NEO
images and verifies concurrently and takes advantage of destination hard drives that may be
faster than the source hard drive. Duration of the total image process time may be reduced by up
to half.
The Falcon-NEO imaging, hash, and wipe speeds are determined
by several factors including the following:
The manufacturer specifications of the drive(s) being used
-
The age of the drive (manufactured date)
-
How often that drive has been used
-
For example, a 2 TB drive with 64MB of cache produced by the
manufacturer 2 years ago is most likely slower than a 2 TB drive
that the same manufacturer just released this year, even though
they are both 7200RPM with 64MB of cache, and both are SATA III.
3.1.1 Step-by-step instructions – Imaging
Logicube Falcon -Neo User's Manual
®
QUICK START
15