Hpa/Dco; Hpa/Dco Indication; Hpa/Dco Mode Setting - WiebeTech Forensic RTX 410-3QJ User Manual

Hide thumbs Also See for Forensic RTX 410-3QJ:
Table of Contents

Advertisement

WiebeTech

4. HPA/DCO

4.1 HPA/DCO Indication

Forensic RTX's HPA/DCO indication LEDs glow green if a drive
containing a hidden area (called an HPA or DCO) is connected. If the
drive does not have an HPA or DCO, the LED does not glow.
See
http://www.wiebetech.com/hpa_dco.php
HPAs and DCOs.
4.2 HPA/DCO Mode Setting (Requires USB or FireWire connection)
By default, the Forensic RTX is shipped on mode #1, leaving the HPA and DCO areas "as is" on the hard
drive. To change your HPA/DCO mode setting, you must use the WiebeTech Forensic Software Utility.
The Utility is available for download from our website, www.wiebetech.com. For more info on the Forensic
Software Utility, see the separate user's manual, which is also on the website.
Your WiebeTech Forensic RTX will alert you to the presence of any HPA or DCO. You may then use the
Forensic Software Utility to manage the HPA/DCO for imaging. There are four modes:
Leave them in place. The HPA and DCO areas
will be left "as is" on the hard drive. This is an
"indication only" mode. Your WiebeTech
forensic device's LED will blink to indicate the
HPA/DCO presence. No other action is taken.
Remove HPA temporarily but ignore DCO.
This mode temporarily lets the user view
information hidden by an HPA. No permanent
changes are made to the hard drive. When the
hard drive is removed from the WiebeTech
forensic device, the HPA is reinstated. Any
DCO is left untouched.
Remove HPA permanently but ignore DCO.
This mode completely removes the HPA,
making the data behind it visible. When the
hard drive is removed from the WiebeTech
forensic device, the HPA is NOT reinstated. The DCO and data behind it are left untouched.
Permanently remove them both. Any HPA or DCO are both completely removed, making all of
the data behind them visible. When the drive is removed from the WiebeTech forensic device,
the HPA and DCO are NOT reinstated.
F o r e n s i c R T X 4 1 0 - 3 Q J U s e r M a n u a l ( A 9 - 4 1 0 - 0 0 0 4 ) R E V 1 . 0
for more information on
- 10 -

Advertisement

Table of Contents
loading

Table of Contents