Tableau TX1, User Manual

Page: 102 / 125

Note: The Fast and Smart blank check options do not perform exhaustive checks of
the entire drive. It is possible for a drive to appear to be blank according to the Fast
or Smart check while still storing forensically relevant information.
Browse Filesystem
The Browse function provides an easy way to view the contents of a recognized filesystem on
any mounted drive, whether it is connected locally or via the network interface (iSCSI or CIFS).
Simply tap the Browse Filesystem button in the Media Utilities list under the Drive Details
screen of a given drive. Note that the Browse operation is also accessible from the Home
screen.
When in the Browse window for a given drive/share, the header row provides a brief
description of the selected drive (TX1 port name) and an X for closing the window. The second
row of information includes drive utilization information and a pulldown for selecting the
desired filesystem (if the media being browsed has more than one). The third row provides the
complete path information for the currently selected file/folder. Below those three rows is the
main browse window, which shows the complete filesystem tree, including all folders/files
contained on the drive or share.
From the browser portion of the window, the user can scroll up and down or tap individual
folders to drill down to the desired level to expose the names of individual files located on the
drive. Many users will find this utility helpful when attempting to triage a large evidence set
and determine the priority by which each drive should be imaged, or when checking the
contents of a destination or accessory drive to free up space by deleting unneeded directories
and files.
SMART Data
This media utility is available for ATA drives that support SMART data reporting. Selecting this
feature will display available SMART data as reported by the drive.
102 Tableau TX1 User Guide Version 2.0