DCO and HPA

From ForensicsWiki
Revision as of 19:04, 16 December 2008 by Simsong (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Tools

  • SAFE-Block, claims the ability to temporarily remove the HPA and remove the DCO and later return it to its original state.

References

Volume 2, Issue 4, December 2005, Pages 268-275

  • Hidden Disk Areas: HPA and DCO, Mayank R. Gupta, Michael D. Hoeschele, Marcus K. Rogers, International Journal of Digital Evidence, Fall 2006, Volume 5, Issue 1