TYPES OF OPERATIONS
Logicube Forensic Falcon™ User’s Manual
63
6.0.2.2 Drives
Tap this icon to choose the drive to be hashed
or the drive that contains the case (image)
files to be verified.
When Drive Hash mode is selected, all connected drives will be
shown.
When Verify mode is selected, only Destination drives with
cases (images) created by the Falcon will be shown.
6.0.2.3 Settings
Tap this icon to choose a drive to adjust the
hash or verify settings.
6.0.2.3.1 Drive Hash Settings
If Drive Hash mode was chosen, the Hash
Settings screen will appear:
Tap this icon to set the hash
method (SHA-1, SHA-256, or
MD5) and to set the expected hash value (if
desired). Setting the expected hash value
instructs the Falcon to hash the drive then
verify the hash with the expected value set.
Each hash task is Logical Block
Address (LBA) based and will hash
drives based on the number of
LBAs. If multiple drives are
selected to be hashed, the Falcon
will hash up to the LBA value of
the smallest capacity drive. If
drives with different capacities
need to be hashed, it is
recommended to start one task
per drive.
