Walkthrough: Forensic Falcon NEO From Logicube

Welcome to Logicube’s tutorial on the Forensic Falcon NEO. In this session, we’ll conduct a product tour, including all of the various ports available, and show you how hard drives are connected to the Falcon NEO.

At the front of the Falcon NEO you will find two USB 3.0 ports that can be used as destination ports. On the top of the unit is the touchscreen display. On the rear of the Falcon NEO you will find two power points; two fans; two network ports; and an HDMI port.

On the left, or Source, side of the Falcon NEO you will find two SAS / SATA ports, one USB 3.0 port, and one PCIE port. All ports on the Source side of Falcon NEO are write-protected.


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.


Unsubscribe any time. We respect your privacy - read our privacy policy.

On the right side, or Destination side, of Falcon NEO, you will find two SAS / SATA, two SATA, one USB 3.0, and one PCIE port.

It’s easy to connect hard drives to the Falcon NEO. Here we have connected one SATA suspect SSD to the Source, or write-protected, side of the Falcon NEO; and one SATA SSD to the Destination side of Falcon NEO.

You can continue to add hard drives to both the Source and Destination sides of Falcon NEO. The NEO supports four source drives and eight destinations.

We’ve now added a second SATA drive to the Source port of the Falcon NEO, and we’ve also added a second SATA drive to the Destination side of the Falcon NEO.

Here we’ve added a USB enclosure to the Source side of the Falcon NEO, and a third SATA drive to the Destination side.

Continuing on, we’ve added a PCIE M.2 drive to the PCIE source port and a fourth SATA drive to the destination SATA port.

Now that we have all four Source ports populated, we’ll continue to add drives to the Destination side of Falcon NEO. Here we’ve connected a USB enclosure to the USB 3.0 port on the Destination side.

A PCIE drive is now connected to the PCIE port on the Destination side of Falcon NEO. A seventh drive, a USB flash drive, is now added to the front destination USB 3.0 port.

Now we’ve added a final eighth drive: a USB flash drive to the second destination USB 3.0 port on the front of the Falcon NEO. All USB ports on the Falcon NEO can be converted to SATA using a USB-to-SATA adaptor.

The Falcon NEO now has a full complement of drives connected: four source drives and eight destinations.

Using the Falcon NEO you can image from four source drives to eight destinations simultaneously. You can easily set up imaging tasks, wipe tasks and hash tasks to all run concurrently directly from the user interface on the Falcon NEO display, or by using a web browser and a PC, operate the Falcon NEO remotely, as seen here.

The Falcon NEO can reach speeds of 50 gigabytes a minute for one-to-one imaging.

We hope you found this tutorial of interest. To learn more about the Falcon NEO, please visit our website at logicube.com, or contact our sales team at sales@logicube.com.

Leave a Comment

Latest Videos

Digital Forensics News Round Up, February 28 2024 #digitalforensics #dfir

Forensic Focus 29th February 2024 4:58 pm

Digital Forensics News Round-Up, February 21 2024 #digitalforensics #dfir

Forensic Focus 21st February 2024 6:19 pm

Alan Platt, Professional Services Consultant at MSAB, discusses his experience as a former UK police officer working in digital forensics. He talks about the different levels of digital forensics capabilities within police forces and how MSAB products like XAMN and XEC Director are used by frontline officers versus lab analysts. 

The discussion covers how MSAB partners with law enforcement to develop custom workflows for mobile device acquisitions that facilitate ISO compliance. Alan explains MSAB's managed service offering, where approved MSAB staff can remotely access a customer's XEC Director server to assist with software updates and troubleshooting. He emphasizes the strict data segregation policies enforced by customers to prevent MSAB from accessing any sensitive case data.

Looking ahead, Alan mentions MSAB's new CEO and hints at some exciting developments coming down the pipeline. He spotlights recent enhancements to XEC Director's speed and database functionality for managing large estates of networked Kiosks. Alan also plugs the new XEC Director training he created to help users fully leverage the platform's capabilities.

00:00 – Introduction to Alan Platt
07:00 – Training
12:00 – Workflows
17:20 – Ensuring a secure environment
19:45 – Customer training
20:35 – Helping customers comply with ISO accreditation
25:00 – Validation and verification
27:30 – ISO standards
30:00 – MSAB’s pipeline plans
32:40 – XEC Director 
43:45 – Privacy of user data

Alan Platt, Professional Services Consultant at MSAB, discusses his experience as a former UK police officer working in digital forensics. He talks about the different levels of digital forensics capabilities within police forces and how MSAB products like XAMN and XEC Director are used by frontline officers versus lab analysts.

The discussion covers how MSAB partners with law enforcement to develop custom workflows for mobile device acquisitions that facilitate ISO compliance. Alan explains MSAB's managed service offering, where approved MSAB staff can remotely access a customer's XEC Director server to assist with software updates and troubleshooting. He emphasizes the strict data segregation policies enforced by customers to prevent MSAB from accessing any sensitive case data.

Looking ahead, Alan mentions MSAB's new CEO and hints at some exciting developments coming down the pipeline. He spotlights recent enhancements to XEC Director's speed and database functionality for managing large estates of networked Kiosks. Alan also plugs the new XEC Director training he created to help users fully leverage the platform's capabilities.

00:00 – Introduction to Alan Platt
07:00 – Training
12:00 – Workflows
17:20 – Ensuring a secure environment
19:45 – Customer training
20:35 – Helping customers comply with ISO accreditation
25:00 – Validation and verification
27:30 – ISO standards
30:00 – MSAB’s pipeline plans
32:40 – XEC Director
43:45 – Privacy of user data

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_ifoHVkjJtRc

How MSAB Is Managing The Digital Forensics Challenges Of Frontline Policing

Forensic Focus 21st February 2024 3:07 pm

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.

Latest Articles