 |
|
Logicube News Article
|
|
Feds use Logicube To Search for EvidenceCNN - Tuesday, December 31, 2002
| |
"A detailed government report has been made public by U.S. District Court Judge Leonie Brinkema, who has scheduled the twice-delayed Moussaoui trial for June 2003. The voluminous evidence in the case includes 140 computer hard drives, according to prosecutors. Four of the computers were used by Moussaoui. FBI investigators copied their hard drives using Safeback and Logicube software, according to the court report." This detailed government report includes an Affidavit of Dara K Sewell in the case "United States v. Zacarias Moussaoui," Crim. No. 01-455-A. The affidavit states the following: "Authentication" in this context means the process of ensuring that the duplicate of the hard drive provided in discovery is an exact copy of that which the FBI originally acquired. The FBI uses three different methods to duplicate or image a hard drive:
(1) GNU/Linux routine dd command via Red Hat Linux 7.1
(2) SafeBack version 2.18 imaging software by New Technologies
(3) Solitaire Forensics Kit, SFK-000A hand-held disk duplicator by Logicube, Inc.
"...In circumstances where time, access or control are limited (as in instances where a computer hard drive may not be seized but must be examined on site), CART examiners will gravitate towards the use of the SFK-000A hand-held disk duplicator by Logicube due to its relative speed, ease of use, and portability."
"...Unlike SafeBack, the Logicube disk duplicator, is not software-based, does not generate an image of a source data set (e.g., hard drive) and then require the "restoration" of the image to similar digital medium (e.g., another hard drive). Instead, the Logicube disk duplicator operates more like a high speed cassette duplicator, typically with the original source hard drive connected at one end of the hand-held Logicube device, and another destination hard drive connected at the other end of the device designated to receive the data of the source drive.
But, not unlike SafeBack, the Logicube hand-held disk duplicator uses CRC verification techniques to ensure that the duplicate data set generated accurately reflects the source data set (the original source hard drive) Moreover, like SafeBack, the FBI has utilized Logicube to successfully and accurately image hundreds of computer hard drives for almost two years and has subjected Logicube to the FBI's own validation. Finally, the manufacturer of Logicube completed extensive testing of its product prior to marketing it to ensure that the tool accurately reproduces source data.
|
|
