WiebeTech
F o r e n s i c L a b D o c k U s e r M a n ua l ( A9 - 0 0 0 -0 0 1 1 R E V 1 . 0 ) - 8 -
3.4 Other Types of Drives
Combo Adapters are available from WiebeTech that can allow your
Forensic LabDock to access many other kinds of drives. Follow
these three simple steps to use a Combo Adapter with your
LabDock:
3.4.1 Connect the drive to the adapter.
3.4.2 Connect LabDock’s ribbon cable to the adapter’s
IDE pins.
3.4.3 Attach LabDock’s 4-wire power connector to the
adapter.
You are now ready to use your dock to access the drive. Combo Adapters are available for SATA drives,
notebook drives, microdrives, ZIF drives, and more. See the WiebeTech website for more details
(www.wiebetech.com).
4. Using the Forensic Software Utility
The Forensic Software Utility is a free software application designed for optional usage with your Forensic
LabDock. The Forensic Software Utility allows you to configure the way LabDock handles any hidden
areas found on attached drives (i.e. HPA and/or DCO), update the LabDock’s firmware, and capture real-
time info about both the write-blocker and the attached drive which can be saved to a log file. Forensic
Software Utility and its user’s manual are available for download from the WiebeTech website
(http://www.wiebetech.com/software/Forensic_Software_Utility.php) or can be found on the CD
accompanying LabDock.
4.1 HPA/DCO Mode Configuration
(Requires FireWire connection)
A Host Protected Area (HPA) and Device Configuration
Overlay (DCO) are reserved areas on a hard drive that
are not accessible by the BIOS or OS. Data can be
hidden behind an HPA or DCO, like a stage hidden
behind a curtain.
Your Forensic LabDock will alert you to the presence of
any HPA or DCO by blinking an LED indicator. By
default, LabDock will not remove HPAs or DCOs. If you
would like LabDock to remove HPAs or DCOs so you
can view the data hidden behind them, you may use the
Forensic Software Utility select your preferred mode of
operation. There are four modes from which to choose:
4.1.1 MODE #1: Leave them in place
This is LabDock’s default setting. The HPA and DCO
areas will be left “as is” on the hard drive. This is an
“indication only” mode. LabDock’s LED indicator will
blink to indicate the presence of hidden areas, but no
other action is taken.
(10 Seiten)
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Kommentare zu diesen Handbüchern