Logicube, Inc. Readme.Txt Release Date: 11/13/2020 ***IMPORTANT NOTE*** This software is for the Forensic Falcon-NEO and is different from the Forensic Falcon. === Software Release === Supported Product: Forensic Falcon-NEO Software version: v3.2u2 For the previous version history, please see the bottom of this document. Software release v3.2u2 adds the following updates to the Falcon-NEO: 1. Enhanced removable USB drives serial number reporting. 2. Added support for multiple LUN USB drives. 3. Enhanced encrypted drive detection. 4. Other bug fixes. === Installation Instructions === If the current software on your Falcon-NEO is BELOW v3.0, please see the updated document titled "Falcon-NEO SW Update Instructions" which can be found the Forensic Falcon-NEO's support page at: https://www.logicube.com/knowledge/forensic-falcon-neo. This document has been updated with new instructions for the v3.0 (and above) software release. === Support === For assistance please contact Logicube tech support at: 818 700 8488 ext. 3, or by email to techsupport@logicube.com. Logicube tech support is available 7am-5pm PST, Monday through Friday, excluding U.S. legal holidays. Logicube Inc. 19755 Nordhoff Pl. Chatsworth, CA 91311 USA tel:818-700-8488 fax:818-435-0088 www.logicube.com === Version History === v3.2u1 (Release Date: 10/23/2020) - Added support to generate a S.M.A.R.T. report for all drives involved in Drive to File, Drive to Drive, and Wipe tasks. - Added language localization for error messages. - Blank disk check now supports random-buffer patterns. - Fixed issue where wiped drives would show as a possibly encrypted drive. - Other bug fixes. v3.2 (Release Date: 07/13/2020) - Resume and auto-resume function added for Drive to File and Partition to File operations. - Opal, VeraCrypt, and TrueCrypt Source drives can now be unlocked/decrypted. Requires the unlock/decryption password to unlock/decrypt drives. - Added email/SMS notifications for successful or unsuccessful tasks. - Secure Erase is now supported for NVMe SSDs. The NVMe SSD must support this feature. - Added support for OneDrive Cloud acquisitions. This requires the Cloud Storage Acquisition Option, F-NEO-CLD-OPT. - Falcon-NEO settings and selections are now persistent. When the Falcon-NEO is turned off then on or rebooted it will boot up with the previous settings and selections prior to the unit being turned off. - Google Drive trash and root folders are now available on Cloud acquisitions. This requires the Cloud Storage Acquisition Option, F-NEO-CLD-OPT. - iOS app shared folders are now mounted. Requires the Mobile Device Capture Option, F-FNEO-CELL-OPT. - Disabled TLS 1.0 and 1.1. Only TLS 1.2 is currently supported. - Improved SMB speeds. - Fixed time stamps on Google Cloud acquisitions. - Other bug fixes. v3.1 (Release Date: 03/06/2020) - Added support for the new Fibre Channel module. - The Falcon-NEO now recognizes source drives and partitions that are possibly encrypted. See Section 3.0.2 in the Falcon-NEO user's manual (v3.1) for more information. - Other bug fixes. v3.0 (Release Date: 02/05/2020) - Added support for the new Cloud Storage Acquisition renewable subscription option. - Added support for the new Mobile Device Capture renewable subscription option. - Added support for SHA256 as a secondary hash option in Ex01. - Added support for ATA Sanitize command. Secure Erase will send the ATA Sanitize command first and if the drive supports this command, it will execute an ATA Sanitize. If the drive does not support this, then a Secure Erase command is sent. - Added support for HFS+, EXT2, and EXT3 destination drive formatting. - Added the GUI functionality to change the Falcon-NEO hostname. - Added the GUI functionality to change NTP servers. - Added USB Serial and Imager Serial number to Ex01 captures - Fixed network repository mount issues when network interface configured as static. - Fixed issue with using BEK files to unlock BitLocker encrypted drives. - Fixed issue where UI does not list network repository contents when the repository is mounted with a mixed-case name. - Other bug fixes. v2.3 (Release Date: 10/29/2019) - Resolved issue with certain Pioneer SSDs not detecting properly. - Added support for USB 3.0 to Ethernet adapters. The following models have been tested: - Anker Aluminum USB 3.0 to Ethernet Adapter (Model # A7611011) - Startech USB 3.0 to Gigabit Ethernet Adapter (Model # USB31000S) - Resolved issue with decrypting BitLocker encrypted partitions on Extended partitions. - Resolved issue with a Lite-On SATA SSD incorrectly reporting the drive is DCO enabled. - Added iSCSI target authentication user ID and password. - Added support for imaging APFS (Apple File System) source drives. Requires the APFS mode be enabled in the Advanced tab in Settings. The Falcon-NEO can also view and browse files from APFS source drives using the file browser feature. - Added support for SHA256 as a secondary hash option when using EX01 (SHA1+SHA256 and MD5+SHA256). - Other bug fixes. v2.2u1 (Release Date: 07/24/2019) - Resolved issue where cloning large capacity drives with a lot of compressible data or blank space caused the Falcon-NEO to freeze. v2.2 (Release Date: 06/21/2019) - Added support for capture path selection. When using Drive to File, File to File, Partition to File, or Net Traffic to File, users can now add or rename folders on the Destination, and also delete empty folders. Images can be saved into these folders. - Added support to view contents L01 images using the File Browser. - Added support to view mounted network repositories using the File Browser. - Renaming repositories no longer show both old and new repository names. Only the new repository name is displayed. - Deleted repositories are now removed from profiles. - When setting a static IP address, the new static IP address and setting can be seen after it is set. - Other bug fixes. v2.1 (Release Date: 03/12/2019) - Added BEK (BitLocker Encryption Key) file support for unlocking BitLocker encrypted drives with FIPS mode encryption. - Added a file browser in the Path Filter for File to File imaging for easy file and/or directory selection. - Added a resume function for Drive to Drive imaging tasks that get interrupted (disconnected drive, power loss, etc.). - Added prompt to notify user when Source and Destination logical sectors do not match. - Added capability to view contents of DD, E01, and EX01 image files created by the Falcon-NEO using the built-in File Browser. - Resolved issue with secure erase and large capacity drives. - Various bug fixes. v2.0 (Release Date: 01/24/2019) - Added support for Optional Thunderbolt™ 3/USB-C I/O Card. - Added support for Optional FireWire® Module. - Improved dynamic fan control for a quieter performance. - L01 and LX01 logical imaging now has the option to change segment size and compression option. 2 GB, 4 GB (default), 8 GB, 16 GB, and Whole Disk are available choices. - Added ACS3 Accessible Max Address support for drives. - Added GUI support for multiple iSCSI connections. - Logical imaging now has a date filter where a date range can be entered to either include or exclude files modified within the specified date range. - Fixed VeraCrypt password encryption using special characters. - Repository names can now contain capital letters. - Other bug fixes. v1.2 (Release Date: 09/05/2018) - Added support to unlock ATA Security locked drives. - Net Traffic-to-File now supports unlimited drive spanning when two or more Destination drives are selected (chained). Users can swap out the drive that is full of data with another pre-formatted Destination drive. All added Destination drives must be formatted by the Falcon-NEO prior to being used in the Net Traffic-to-File task. - Various imaging optimizations and improvements. - Minor bug fixes. v1.1 (Release Date: 07/19/2018) - Added Reverse Read for bad sector handling - Instructs the Falcon-NEO to skip past a bad sector (based on error granularity settings) then read backwards, potentially capturing data that may not necessarily be read when skipping the entire block. - Added support for two additional USB 3.0 Destination ports - The front two USB 3.0 ports are now Destination ports (USB_D2 and USB_D3) aside from being host ports. - Chain Destinations for Net Traffic to File - Allows spanning to multiple destinations. - Added L01 support for File to File captures. - Various bug fixes. v1.0 (Release Date: 03/30/18) - Initial release