From a twitter post, a cool video on imaging with X-Ways noted (13:50) as doing something other tools don’t. The entire video is actually pretty good too.
No surprise. XWF does something other tools don’t
From a twitter post, a cool video on imaging with X-Ways noted (13:50) as doing something other tools don’t. The entire video is actually pretty good too.
The X-Ways Forensics Practitioner's Guide/2E 
Brett: I saw Scott’s presentation a few days ago and noticed the reference he made to X-Ways making a copy of the SMART table before and after imaging. Where is this information provided? If it’s in the text file that’s generated when the imaging is completed, I just looked a couple of these and all I get is “SMART: N/A (this request is not supported)” at the end of the text file.
“Depending on the type of interface being used, some S.M.A.R.T.-enabled motherboards and related software may not communicate with certain S.M.A.R.T.-capable drives. For example, few external drives connected via USB and Firewire correctly send S.M.A.R.T. data over those interfaces.”
(http://en.wikipedia.org/wiki/S.M.A.R.T.#Visibility_to_host_systems)
To get the SMART data, do not attach SATA hard disks through USB.
Is it possible to have a quick text synopsis of the comments made in the talk? For those of us who cannot watch videos at work, or don’t want to watch an hour-long presentation 🙂
A quick mention of XWF, 13.50.