Difference between pages "Hard Drive" and "DCO and HPA"
From Forensics Wiki
(Difference between pages)
m (→References) |
|||
| Line 1: | Line 1: | ||
| − | + | ==Tools== | |
| + | * [http://www.vidstrom.net/stools/taft/ TAFT (The ATA Forensics Tool)] claims the ability to look at and change the HPA and DCO settings. | ||
| − | + | * [http://www.softpedia.com/get/Security/Security-Related/SAFE-Block.shtml SAFE-Block], claims the ability to temporarily remove the HPA and remove the DCO and later return it to its original state. | |
| − | == | + | ==References== |
| + | * [http://www.sciencedirect.com/science?_ob=ArticleURL&_udi=B7CW4-4HR72JM-2&_user=3326500&_rdoc=1&_fmt=&_orig=search&_sort=d&view=c&_acct=C000060280&_version=1&_urlVersion=0&_userid=3326500&md5=030e6e2928779b385c76658736d11b98 Methods of discovery and exploitation of Host Protected Areas on IDE storage devices that conform to ATAPI-4], Mark Bedford, Digital Investigation, Volume 2, Issue 4, December 2005, Pages 268-275 | ||
| − | + | * [http://www.utica.edu/academic/institutes/ecii/publications/articles/EFE36584-D13F-2962-67BEB146864A2671.pdf Hidden Disk Areas: HPA and DCO], Mayank R. Gupta, Michael D. Hoeschele, Marcus K. Rogers, International Journal of Digital Evidence, Fall 2006, Volume 5, Issue 1 | |
| − | + | ||
| − | + | ||
| − | + | ||
| − | * [http://www. | + | |
Revision as of 19:05, 16 December 2008
Tools
- TAFT (The ATA Forensics Tool) claims the ability to look at and change the HPA and DCO settings.
- SAFE-Block, claims the ability to temporarily remove the HPA and remove the DCO and later return it to its original state.
References
- Methods of discovery and exploitation of Host Protected Areas on IDE storage devices that conform to ATAPI-4, Mark Bedford, Digital Investigation, Volume 2, Issue 4, December 2005, Pages 268-275
- Hidden Disk Areas: HPA and DCO, Mayank R. Gupta, Michael D. Hoeschele, Marcus K. Rogers, International Journal of Digital Evidence, Fall 2006, Volume 5, Issue 1
