Decide what should leave the local case store
The remote task may need a full image, a selected export or only a small set of logs. Agree that scope before copying. Preserve the original acquisition and describe any derived output so the recipient understands what was and was not supplied.
Use a case-specific destination with restricted access. Avoid shared personal accounts and general-purpose download folders. Confirm the approved region and service with the organisation responsible for the evidence.
View full sizeVerify the destination as well as the transport
Check the SSH server’s host key through an independent trusted route before accepting it. Use the approved account and authentication method. Do not put real keys, passwords or case identifiers into a public demonstration or an enquiry form.
Encryption in transit does not prove that a file arrived intact or that the right server received it. Compare the transferred file’s hash with the recorded source-copy hash. For segmented images, include every segment and an inventory; verify like-for-like files rather than unrelated container and stream values.
Handle interruption and closure explicitly
A resumed transfer still needs final verification. Check the client’s resume behaviour and destination state, particularly after a partial upload. Retain the completion record and keep unfinished copies out of the ready-for-examination location.
When the remote task ends, follow the agreed retention and deletion process for working copies, snapshots and backups. Disconnecting RDP or deleting a desktop shortcut does not remove cloud evidence. Ask SQFR to demonstrate the local-to-remote workflow with harmless test data and your approved transfer service.
What to check
- Approved files, destination region and restricted case folder
- Host identity verified and credentials handled separately
- Destination hashes and retained transfer record
Common questions
Is SFTP the same as FTPS?
No. SFTP uses SSH. FTPS is FTP protected by TLS. Match the client, server and policy rather than treating the names as interchangeable.
Does Remmina automatically upload an image when I connect?
No. Evidence transfer is a separate action. Review clipboard and drive-redirection settings as well, because they can provide other paths for data movement.
Explore the relevant Acorn apps
Put the workflow to the test
Plan a verified remote-evidence handover
Tell SQFR about the source types, task and equipment you need. We can discuss a focused demonstration and the configuration or quotation that fits. Do not send case evidence or credentials through the enquiry form.