|
|
Forensics
DCO discovery Apr 21 2005 11:54AM Nick Puetz (nickpuetz yahoo com) (3 replies) DCO discovery & removal, capabilities of imaging & wiping tools May 11 2005 08:53AM Arne Vidström (arne vidstrom foi se) (1 replies) More about DCO discovery & removal, capabilities of imaging & wiping tools May 26 2005 06:32AM Arne Vidström (arne vidstrom foi se) |
|
Privacy Statement |
> Does anyone know of any good tools or methods for discovering if and
> ATA hard drive has a device configuration overlay (DCO) area? I know
> of tools that are available to detect a host protected area (HPA) such
> as dmesg, hdparm, and diskstat. But to my knowledge, these do not
> work with DCOs. Thanks.
My copy of Carrier's *File System Forensic Analysis* is at home, so I
can't give you page numbers right now, but there are clear instructions
in the book on how to do it.
It's generally a great book and everyone should read it!
--
http://www.eff.org/about/staff/#chris_palmer
[ reply ]