All times are UTC - 5 hours [ DST ]


Switch to mobile style


Post new topic Reply to topic  [ 15 posts ] 
Author Message
 Post subject: Imager for good drives (forensic)
PostPosted: August 23rd, 2012, 4:11 
Offline
User avatar

Joined: September 5th, 2010, 12:29
Posts: 1039
Location: South Africa
Hi all,

One of my colleagues is looking for a hardware imager for her forensic business. She outsources the bad drives, so just requires a hardware imager for good drives.

Can anyone recommend an imager for this purpose? I have no experience with imagers for good drives. Currently they are using DD, but want a more compact hardware tool.

Thanks,
Nick

_________________
Death is nothing, but to live defeated and inglorious is to die daily.
Data Recovery Cape Town


Top
 Profile  
 
 Post subject: Re: Imager for good drives (forensic)
PostPosted: August 23rd, 2012, 8:06 
Offline
User avatar

Joined: January 28th, 2009, 10:54
Posts: 3408
Location: Greece
Why not DDI? Too expensive for this kind of work?

DDI has a "CLONE GOOD DRIVE" feature.

I have also a stand-alone imager from StarTech, which says it can even skip bad sectors, but 9 out of 10 times I've tried it, it hangs during imaging and you have to start over.

_________________
http://www.northwind.gr
SandForce SSD Recovery
Ransomware Reverse Engineering - NoMoreRansom! partners


Top
 Profile  
 
 Post subject: Re: Imager for good drives (forensic)
PostPosted: August 23rd, 2012, 8:18 
Offline
User avatar

Joined: September 5th, 2010, 12:29
Posts: 1039
Location: South Africa
I did suggest a DDI but they don't want to spend that kind of money, they want a cheaper option. I'll have a Google and see what's on offer. It will only be for good drives so I'm sure they can pickup something cheap.

_________________
Death is nothing, but to live defeated and inglorious is to die daily.
Data Recovery Cape Town


Top
 Profile  
 
 Post subject: Re: Imager for good drives (forensic)
PostPosted: August 23rd, 2012, 8:27 
Offline
User avatar

Joined: May 13th, 2010, 11:17
Posts: 2776
Location: Kuwait
Nick_CT wrote:
I did suggest a DDI but they don't want to spend that kind of money, they want a cheaper option. I'll have a Google and see what's on offer. It will only be for good drives so I'm sure they can pickup something cheap.


Nick_CT, in the world of Forensics, there is no such of the word CHEAP, if you are seeking PRO. tools/Appz

as an example here for you, there are many Appz/HW tools for for example Iphone/Smartphones (from A-Z) everything not going in details of those products, but the BEST FORENSIC tools of those costs FROM 8000$ (more or less) and UP,

i remember i asked last time for those and was like 12k $$$$ full forensic kit.

thats why they call it FORENSIC if forensic is the purpose of buying it my dear, if not , then no need to spend more on it, cheap App. or HW will clone and thats it

good luck

:wink:

_________________
Kuwait Data Recovery - UNIX GTC
The only reason for time is so that everything doesn't happen at once. By: Albert Einstein


Top
 Profile  
 
 Post subject: Re: Imager for good drives (forensic)
PostPosted: August 23rd, 2012, 8:31 
Offline
User avatar

Joined: September 5th, 2010, 12:29
Posts: 1039
Location: South Africa
I have an honours degree in digital forensics, so I am aware of this ;) They have Encase, FTK, write blockers, etc. I was asking for suggestions of cheap hardware imagers for good drives that anyone has had experience with, not actual forensic equipment so to speak.

_________________
Death is nothing, but to live defeated and inglorious is to die daily.
Data Recovery Cape Town


Top
 Profile  
 
 Post subject: Re: Imager for good drives (forensic)
PostPosted: August 23rd, 2012, 8:39 
Offline

Joined: March 3rd, 2009, 15:27
Posts: 131
Location: Canada
Hi, take a look here. There is another unit, let me search. http://www.jharddrive.com/products/hard ... ic_DR.html

Ok, here it is http://ca.startech.com/HDD/Duplicators/ ... UNIDUPDOCK.


Top
 Profile  
 
 Post subject: Re: Imager for good drives (forensic)
PostPosted: August 23rd, 2012, 8:55 
Offline
User avatar

Joined: September 5th, 2010, 12:29
Posts: 1039
Location: South Africa
SquaL wrote:
Hi, take a look here. There is another unit, let me search. http://www.jharddrive.com/products/hard ... ic_DR.html

Ok, here it is http://ca.startech.com/HDD/Duplicators/ ... UNIDUPDOCK.


Thanks mate.

_________________
Death is nothing, but to live defeated and inglorious is to die daily.
Data Recovery Cape Town


Top
 Profile  
 
 Post subject: Re: Imager for good drives (forensic)
PostPosted: August 23rd, 2012, 9:46 
Offline
User avatar

Joined: January 28th, 2009, 10:54
Posts: 3408
Location: Greece
SquaL wrote:

northwind wrote:
I have also a stand-alone imager from StarTech, which says it can even skip bad sectors, but 9 out of 10 times I've tried it, it hangs during imaging and you have to start over.

_________________
http://www.northwind.gr
SandForce SSD Recovery
Ransomware Reverse Engineering - NoMoreRansom! partners


Top
 Profile  
 
 Post subject: Re: Imager for good drives (forensic)
PostPosted: August 23rd, 2012, 9:59 
Offline
User avatar

Joined: September 5th, 2010, 12:29
Posts: 1039
Location: South Africa
northwind wrote:
SquaL wrote:

northwind wrote:
I have also a stand-alone imager from StarTech, which says it can even skip bad sectors, but 9 out of 10 times I've tried it, it hangs during imaging and you have to start over.


Their requirement is only for good drives, so it should be sufficient. Thanks.

_________________
Death is nothing, but to live defeated and inglorious is to die daily.
Data Recovery Cape Town


Top
 Profile  
 
 Post subject: Re: Imager for good drives (forensic)
PostPosted: August 23rd, 2012, 10:05 
Offline

Joined: December 17th, 2009, 22:57
Posts: 142
Location: Macedonia
I thing this one is with good price http://www.forensicpc.com/proddetail.asp?prod=TD1

If they have a very small budget, for begging they can set up one desktop PC with FTK Imager (free) with write blocker.

_________________
Sistrum Data Recovery
http://www.sistrum.mk/en


Top
 Profile  
 
 Post subject: Re: Imager for good drives (forensic)
PostPosted: August 23rd, 2012, 12:03 
Offline
User avatar

Joined: January 28th, 2009, 10:54
Posts: 3408
Location: Greece
Nick_CT wrote:
northwind wrote:
SquaL wrote:

northwind wrote:
I have also a stand-alone imager from StarTech, which says it can even skip bad sectors, but 9 out of 10 times I've tried it, it hangs during imaging and you have to start over.


Their requirement is only for good drives, so it should be sufficient. Thanks.


Well, I used it several times for seagate drives with BSY bug, it failed. I used it yesterday to clone a drive that had 1 (ONE) bad sector and it failed too (despite the fact that I had the "skip bad sectors" feature ON).

_________________
http://www.northwind.gr
SandForce SSD Recovery
Ransomware Reverse Engineering - NoMoreRansom! partners


Top
 Profile  
 
 Post subject: Re: Imager for good drives (forensic)
PostPosted: August 23rd, 2012, 12:19 
Offline
User avatar

Joined: February 9th, 2009, 16:13
Posts: 2513
Location: Ontario, Canada
I have a couple of the Startech duplicator docks and think that they can be pretty useful for forensic duplication. They definitely don't deal well with bad sectors, unlike what they suggest, and they can be a bit of a PITA when it comes to drives with HPA set. But for a price of $250, who can complain.

It should also be noted that they promote the ability to wipe a drive...this is only done by deleting sector 0, if memory serves me correct.

_________________
Luke
Recovery Force Data Recovery


Top
 Profile  
 
 Post subject: Re: Imager for good drives (forensic)
PostPosted: August 23rd, 2012, 15:44 
Offline
User avatar

Joined: June 23rd, 2008, 11:26
Posts: 501
Location: Austin, TX
http://www.tableau.com/index.php?pageid ... &model=TD2

we use these( and the TD1's) , not sure on the cost tho, but they are fast.


Top
 Profile  
 
 Post subject: Re: Imager for good drives (forensic)
PostPosted: August 24th, 2012, 14:06 
Offline
User avatar

Joined: July 12th, 2010, 4:38
Posts: 1364
Location: Portugal
Why not the Atola tools?

_________________
http://www.pclab.com.pt facebook.com/PCLAB.A.T
ACELab partner


Top
 Profile  
 
 Post subject: Re: Imager for good drives (forensic)
PostPosted: August 24th, 2012, 14:28 
Offline
User avatar

Joined: February 9th, 2009, 16:13
Posts: 2513
Location: Ontario, Canada
pclab wrote:
Why not the Atola tools?

If I read it correctly, they are looking for an economical tool that is more portable than a system running DD. Atola, to the best of my knowledge, is a lot more than $1000.

_________________
Luke
Recovery Force Data Recovery


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 15 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group