19
Protecting Your Digital Assets
TM
CRU Ditto Shark User Manual
5.5 NAMING
The “Naming” tab allows you to customize how the Ditto Shark names directories
and files during imaging actions. When you are finished, click the
Commit Changes
button
to save the changes.
As shown in Figure 21, the file directory used in network capture actions can be a
name that contains up to six user-selectable fields, and the file name used in network
capture actions can contain up to four user-selectable fields. As you customize these
fields, the “Directory Name Template”, “Final Directory Name”, “File Name Tem-
plate”, and “Final File Name” fields will update. The template fields show the order of
variables that will appear in the name, whereas the final name fields display the direc-
tory or file name using the actual information from the “Investigation Info” panel on the
“Home” screen and the source disk.
5.9.1 Variables
To modify the any of the user-customizable variables, navigate to the “Investigation
Info” panel on the “Home” screen (see Section 4.2).
•
Timestamp/{Timestamp}:
Displays the timestamp. The timestamp is
required to be included in all directory names, but it is optional for file names.
•
Base Filename:
Displays the base file name. This option is the default first
variable for file names, but may be changed. User customizable.
•
Case Number:
Displays the case number. User customizable.
•
Description:
Displays the description field. User customizable.
•
Evidence Number:
Displays the evidence number. User customizable.
•
Investigator:
Displays the investigator. User customizable.
5.6 QUICK START
The “Quick Start” tab allows you to customize the quick start mode that appears on
the LCD of the Ditto Shark when the “Quick Start” option is enabled in the “System”
tab. Many of the settings on the next page are visible only when certain types of
actions are selected in the “Action to perform” drop-down box.
5.6.1 Quick Start Settings
•
Action to perform:
Sets the action that is performed by the quick start mode.
•
Action Target:
For the “Erase Destination Disk” action only. Specifies which
target volume will be erased.
Figure 21.
The “Naming” tab on the “Configure”
screen.
