| <<< Hard Disk Data Acquisition, cont | Index | Hard Disk Data Acquisition >>> |
Occasionally you hear of someone imaging a hard rive using two different tools and got different sized images.
The reason is usually because one of the tools used the BIOS and the other did not.
Make sure you know how your acquisition tool acquires the disk:
If the tool uses the BIOS make sure it reports the full disk before you acquire the disk.
The BIOS adds one more location where an error can be introduced into the final image, and it should be avoided if better alternatives exist.
| <<< Hard Disk Data Acquisition, cont | Index | Hard Disk Data Acquisition >>> |