Case Info - Logicube Falcon-NEO User Manual

Drive to File
-
Partition to File
-
Drive to Drive
-
Error Handling – Available in the following modes (See

Drive to File
-
Partition to File
-
Drive to Drive
-
Hash/Verification Method – Available in the following modes (See

Drive to File
-
File to File
-
Partition to File
-
Drive to Drive
-
File Image Method Settings – Available in the following modes (See

Drive to File
-
Partition to File
-
Clone Method Settings – Available in Drive to Drive mode. See

Verify Hash – Available in File to Drive mode. See

Special settings in File to File Mode – Only available in File to File mode and includes Root

Directory, Output Format, Filter Settings. See
Special Settings in Net Traffic to File Mode – Only available in Net Traffic to File mode and

includes Number of Segments, and Segment Ring Buffer. See

4.3.1 Case Info

Case Info is available in all Imaging modes and allows users to enter information about
the case. Case Info and is not required to start an imaging operation.
Information entered here will appear in the logs. In addition, some forensic analysis
software can import the information when the image files are opened.
Tap any of the boxes and an on-screen keyboard will appear allowing information to be
entered. After entering the information, tap the OK icon to go back to the previous
screen.
®
-Neo User's Manual
Logicube Falcon
Log names and file names can be customized by entering
a Case/File Name. For example, if a DD or E01 image is
performed, and the Case/File Name is set to TestCase,
the log name and file name will be called TestCase.
Subsequent Case/File Names that are the same will be
identified with a dash, then the next image number, for
example, TestCase-1, TestCase-2, etc.
Section 4.3.3):
Section
Section
Section
Section 4.3.7.
Section 4.3.8.
Section
IMAGING
4.3.4):
4.3.5):
4.3.6.
4.3.9.
39