Logicube Forensic Falcon™ User’s Manual
131
11: Viewing Source and Destination Drives over a Network
11.0 Viewing drives over a network - Overview
The contents of drives connected to any Source or Destination position on the Falcon can be
viewed over a network.
To view Source the contents of a Source drive over a network, an iSCSI initiator is required.
Windows Vista, 7, 8, and 8.1 have a built-in iSCSI initiator located in the Administrative Tools
section of the Control Panel. Windows XP does not have a built-in iSCSI initiator. Microsoft has a
separate download for the iSCSI initiator for Windows XP and can be found by searching
Microsoft’s website for
iscsi initiator
. No data can be written or deleted to the drives.
Contents of a Destination drive can be viewed over a network using built-in file
explorers/viewers. Contents of Destination drives viewed over a network are write-protected.
11.1 Viewing Source or Destination drives over the network using SMB
Contents of a Source or Destination drive can be viewed over a network using built-in file
explorers/viewers like Windows Explorer. Contents of Source drives viewed over a network are
write-protected.
Drives connected to the Source ports (SAS_S1, SAS_S2, USB_S1, and
FW_S1)
–
Drives connected to the Source ports are always write-protected.
Using the File Browser function will not alter the drive or its contents in any way.
11.1.1 Step-by-step – Viewing Source or Destination drives
1.
Connect the Falcon directly to a computer (using a network cable) or to
a network.
2.
On the computer (on the same network), open Windows Explorer and
open the Falcon’s IP address or the hostname of the Falcon with its
serial number. Both IP address and serial number can be found by going
to the
Statistics
screen on the Falcon. For example, browse to
or
where XXXXX is the 6 digit serial
number of the Falcon.