IMSOLO-IV Forensics Quick Start Guide
Contents
1. 512 CRC32 MD5 Hash Targets Type of Operation LinuxDD Capture Start Abort Load Size MB 0 Time Left 00 00 00 Speed MB min 0 Elapsed Time 00 00 00 Copied MB 0 0 Advanced Operator Wizard On Screen Next Copy New Copy A Screen Screen Screen Keyboard Session Session perkiop Eat Aboni Advanced Interface Control Console 4 Attach the ICS supplied SATA SAS drive data power cables to the unit s Suspect and Evidence connectors and to the SATA or SAS drives For PATA drives use the supplied ICS SATA to PATA Adapter and connect the supplied PATA data cable s Unit Side connector to the Adapter s data connector and the HDD Side connector to the drive Suspect 1 Port Suspect 2 Port Evidence 1 Drive Positions Port Evidence 2 Port 5 Select the Mode of Operation from the Operations pull down menu Main Settings Case Info Detection Mount Drive HPADCO Log Tools SUSPECT DRIVE MB min POSITION Select positions to detect O Suspect 1 EVIDENCE DRIVES MB min POSITION _ O Suspect 2 Drive Selection O Evidence 1 Panel O Evidence 2 OTHER DETECTED DRIVES POSITION Detect Remove Add Network Drives Drives Location LinuxDD Settings Custom File Capture File Size 4 7GB DVD Size MB al C Detect Remote Drives File name Select Has2. IMSOLO IV Forensics Quick Start Guide Rev 2 3 Please refer to the MSolo lV Forensics User s Manual for detailed instructions The Users Manual is located on the supplied CD labeled IMSolo IV Users Manual Also included is the MSolo IV Expansion Option Quick Start Guide Updated User Manuals and Software are available at www ics ig com or www icsforensic com 1 Place the IMSolo IV Forensics on a level surface 2 Attach the AC power cord to the unit s power supply located on the unit s back panel and to an electrical outlet The voltage may be either 110v or 220v The unit will automatically switch to use either voltage 3 Power ON the unit by pressing the unit s Power ON button located on top corner of the units back panel The MSolo IV Forensics Advanced Interface Control Console will be displayed Main Settings Case Info Detection Mount Drive HPAIDCO Log Tools SUSPECT DRIVE MBAnin POSITION Select positions to detect O suspect 1 EVIDENCE DRIVES _MBimin POSITION O Suspect 2 09 Evidence 1 09 Evidence 2 OTHER DETECTED DRIVES POSITION Detect Remove Add Network Drives Drives Location LinuxDD Settings Patan ile Capture File Size 4 7GB DVD Size MB a Detect Remote Drives File name 7 Select Hashing methods EEN Hardware accelerated YP a Decrypt SHAI SHA2 256 a Read Back SHA2 224 SHA2 384 Verify C SHA2
3. hing methods E Y Hardware accelerated E Decrypt SHALI M SHA2 256 Read Back SHA2 224 T SHA2 384 Verify T SHA 612 CRC32 MDS Hash Targets Operational Modes Type of Operation LinuxDD Capture Start Abort Load Size MB 0 Time Left 00 00 00 Speed MB min 0 Elapsed Time 00 00 00 Copied MB 0 0 Advanced Operator Wizard On Screen Next Copy New Copy Screen Screen Screen Keyboard Session Session Desktop Ent Ahont 6 Select the drives to be used for the selected operation from the Drive Selection Panel 7 Verify all remaining applicable settings and optionally enter Case Information using the CASE INFO screen functions It is recommended to enable the Hash Targets function Selecting Hash Targets will result in the Capture operation generating the Hash value for the data read from the Suspect drive and the data written to the Evidence drive After all the data is written to the Evidence drive the Capture operation will generate the Hash value for the data read from the Evidence drive A Hash values generated during the capture operation are generated for the data read from the Suspect s drive not from the data read from the Evidence target drive unless the unit is instructed to hash the Evidence drive s by enabling the Hash Targets function As an alternative the Evidence Drives can also be hashed after the capture operation using the Hash mode of operation 8 Select START to begin the
4. operation Operational status information will be displayed during an operation 9 After the operation completes the drives will be powered OFF and the drives can be safely removed The simulated drive status LEDs will be set to GREEN if the operation passes or RED if the operation fails Log files will automatically be stored internally and can be transferred to external media using the unit s USB ports located on the back of the unit NOTE The unit can be powered OFF by pressing and releasing the unit s Power button located on the top corner of the unit s back panel
Download Pdf Manuals
Related Search