CRU Ditto Forensic FieldStation User Manual
Page 27
27
Protecting Your Digital Assets
TM
Ditto Forensic FieldStation User Manual
•
Physical Image Type:
Sets the default physical image type for all actions that create a physical image.
The image types available are E01 or DD.
•
Hash Type:
Sets the default hash algorithm that will be used for disk verification and the “Hash Disk”
action. The available options are None, MD5, SHA-1, or MD5 + SHA-1.
•
Erase Mode:
Sets the default erase mode that will be used for all actions that require erasing disks. The
available modes are Clear Partition Table, Quick Erase, Secure Erase Normal, Secure Erase Enhanced,
DOD Clear, DOD Sanitize, NIST800-88 Clear, and NIST800-88 Purge.
•
Default Format:
This is the default file system that will be used to format destination disks when they
are used in actions that the Ditto Forensic FieldStation performs. The available formats are HFS+, FAT32,
NTFS, EXT2, EXT3, EXT4, and XFS.
•
HTML Logging:
Logs are always saved in .XML format. This option causes the Ditto Forensic FieldSta-
tion to save logs in HTML format as well. The available options are Off and On.
•
Verify Single:
Determines whether individual destination disk are hashed and compared to the hash
value of the source disk’s hash value. The available options are Yes and No.
•
Verify Mirror:
Determines whether mirrored destination disks are hashed and compared to the hash
value of the source disk’s hash value(s). You can choose to verify no disks, eSATA-A or eSATA-B individu-
ally, or to verify both disks.
•
Verify Clone & Image:
Determines whether cloned and imaged disks are hashed and compared to the
hash value of the source disk’s hash value during a “Clone & Image Source Disk” action. You can choose
to verify no disks, the clone, the image, or both.
•
Log Disk Info:
Determines whether S.M.A.R.T. and hdparm disk information is logged before running an
action, after running an action, both, or not at all.
•
Source Network:
Enable or disable the source network Ethernet connection.
•
Destination Network:
Enable or disable the destination network Ethernet connection.
•
Source MAC Address:
Displays the source Ethernet port’s MAC address.
•
Source IP Assignment:
Displays the source Ethernet port’s IP assignment method. The available
options are DHCP or Static. An IP address can be manually configuring in the browser interface (see
Section 5.2.2).
•
Source Network Access:
Allows you to choose whether or not the Ditto Forensic FieldStation responds
to any network traffic via the source Ethernet port.
•
Source IP Address:
Displays the IP address assigned to the source Ethernet port.
•
Dest. MAC Address:
Displays the destination Ethernet port’s MAC address.
•
Dest. Network Mode:
Displays the destination Ethernet port’s networking mode. The available options
are Server, Client (DHCP), or Client (Static IP). “Server” allows you to use enable the Ditto Forensic
FieldStation for use as a server. The network mode can be further configured in the browser interface
(see Section 5.2.3).
•
Dest. IP Address:
Displays the IP address assigned to the destination Ethernet port.
•
Dest. Subnet Mask:
Displays the subnet mask address assigned to the destination Ethernet port.