Falcon®-NEO

Forensic Imager

  • Extreme speed, imaging at surpassing 50GB/min*. Clone PCIe to PCIe at speeds of 69GB/min
  • Image & verify from 4 source to 6 destination drives for ultra-efficient imaging
  • Logical Imaging. Targeted Imaging feature creates a logical image using pre-set, custom filters, file signature files and keyword search to capture only specific files needed
  • Image to/from a network location using two 10GbE connections for fast network imaging performance
  • Multi-task. Perform image, wipe, hash tasks simultaneously. Little or no speed degradation when imaging from two sources to two destinations
  • Concurrent Image+Verify feature. Verification begins while the imaging process is occurring. Duration of total image plus verification process time may be reduced by up to half
  • Write-blocked preview & triage directly on the Falcon-NEO
  • Network Traffic Capture. Capture network traffic, VOIP, internet activity

 

Extremely Fast ImagingThe Falcon-NEO is the fastest forensic imaging solution available, achieving imaging speeds surpassing 50GB/min*. The product can clone PCIe to PCIe drives at speeds of 69GB/min.
Multiple Image FormatsThe Falcon images and verifies to the following formats: native or mirror copy, dd image,.dmg image, e01, ex01.The Falcon-NEO supports MD5, SHA1, SHA256 and dual-hash (MD5+SHA-1) authentication.

File SystemsFalcon-NEO formats destination drives to NTFS, exFAT, EXT4, or FAT32 file systems.The unit supports imaging from source drives formatted to any major file system.
Multiple Imaging PortsWrite-protected source ports include:
2 SAS/SATA
1 USB 3.0 (can be converted to SATA using an optional USB to SATA adapter)
1 PCIe
Destination ports include:
2 SAS/SATA
2 SATA only
1 USB 3.0 (can be converted to SATA using an optional USB to SATA adapter)
1 PCIe
All destination ports are built into the unit, no additional module or bay attachments required.

Two 10GbE network ports provide state-of-the-art connectivity for fast network imaging performance.
I/O Card Ports Designed for the future, the Falcon-NEO includes 2 source I/O card ports and 1 destination I/O port to support new interface technologies as they arrive on the market. Thunderbolt/USB 3.1 Gen 2/USB-C I/O card planned for Q4 2018.
Multi-taskImage simultaneously from multiple sources to multiple destinations including a network repository. Supports imaging to one location while simultaneously hashing and/or wiping a second drive. Perform up to 5 tasks concurrently. Little or no speed degradation when imaging from two sources to two destinations.
Task MacroAllows users to set specific tasks to be performed sequentially. For example, first wipe, then image, then verify a drive.Set up to five Macros with up to 9 operations/tasks for each macro.

Parallel ImagingSimultaneously perform multiple imaging tasks from the same source drive to multiple destinations using different imaging formats. For example, clone to a network location or a destination drive in native copy format while imaging to a different destination drive using e01, ex01 dd or dmg format.
Web Browser/Remote OperationAn easy to use and intuitive interface allows you to connect to the Falcon-NEO from a web browser and manage all operations remotely. The browser features automatic page scaling for iPad type devices.

Broad Interface SupportBuilt-in support for SAS/SATA/USB/PCIe storage devices. Supports eSATA, mSATA and microSATA interfaces with adapters included with Falcon-NEO. Optional adapters are available for 1.8″/2.5″/3.5″ IDE, 1.8″ IDE ZIF and flash drives.
PCIe Support Support for M.2 PCIe and M.2 NVMe type SSDs and mini-PCIe and PCIe express cards is provided using optional adapters
CD/DVD/Blu-ray Imaging The Falcon-NEO can image CD/DVD/Blu-ray media by using a USB optical drive connected to the USB port on the Falcon-NEO. The Falcon supports multi-session CD/DVDs.
WipeWipe up to DoD specifications or use Secure Erase to erase drives, wipe at speeds up to 27GB/min
Image to External Storage DeviceThe Falcon-NEO allows you to image to an external storage device such as a NAS,using the 10GbE ports, USB 3.0 or via the SAS/SATA connection.
SCSI Module Option The SCSI Module Option expands the capability of the Forensic Falcon-NEO by providing support for imaging from and to SCSI hard drives. The Module connects seamlessly to the Falcon-NEO and provides 1 write-protected SCSI source port or SCSI destination port. The SCSI Module is planned to be available in early summer 2018.
Image From Desktop/Laptop PCs Create a forensic bootable USB flash drive to image a source drive from a computer on the same network without booting the computer’s native O/S. Supports Surface Pro 4 and above laptops. For instructions on how to create the USB flash drive go to the Falcon-NEO Knowledge Base page.
Image from a MACImage from a MAC with USB-C ports using a USB-C to USB-A cable and Target Disk Mode. Users can also image from MACs using Logicube’s USB boot device. Create a forensic bootable USB flash drive to image a source drive from a MAC on the same network without booting the MAC’s native O/S. The Falcon-NEO supports imaging from MacBook Pro systems.
Error handlingDrive error handling is enhanced with a configurable error granularity feature. When a bad sector on the source drive is found Falcon-NEO will, by default skip that sector. Changing the granularity allows more sectors to be skipped. There are 3 options ( 512 Bytes, 4096 Bytes, 64 KIB,). As an example, if 4096 Bytes is chosen, and one of the 8 sectors in that cluster size contains a bad sector, the Falcon-NEO will skip the entire cluster (or 4096 bytes or 8 sectors).Removable Storage DriveO/S and audit trail/logs are stored on an internal drive. This drive is easily removed for secure/classified locations.7″ Touch ScreenUses a capacitive touch screen with an easy-to-use interface that provides easy navigation through all operations. An on-screen keyboard is also included.
HPA And DCO CaptureDetect and capture Host Protected Areas (HPA) and Device Configuration Overlay (DCO) hidden areas on the source (suspect) drive.
Compact SizeThe Falcon-NEO is light weight, at 3.0lbs (1.36kg) and features a small footprint of 10″W X 3.25″H X 6.75″D (25.4cm X 8.2cm X 17.1cm)