No surprise. XWF does something other tools don’t From a twitter post, a cool video on imaging with X-Ways noted (13:50) as doing something other tools don’t. The entire video is actually pretty good too. Share this:TwitterLinkedInFacebookRedditEmailLike this:Like Loading... Related Author: Brett Shavers http://www.amazon.com/author/brettshavers https://www.brettshavers.com https://www.dfir.training View all posts by Brett Shavers
4 thoughts on “No surprise. XWF does something other tools don’t”
Brett: I saw Scott’s presentation a few days ago and noticed the reference he made to X-Ways making a copy of the SMART table before and after imaging. Where is this information provided? If it’s in the text file that’s generated when the imaging is completed, I just looked a couple of these and all I get is “SMART: N/A (this request is not supported)” at the end of the text file.
“Depending on the type of interface being used, some S.M.A.R.T.-enabled motherboards and related software may not communicate with certain S.M.A.R.T.-capable drives. For example, few external drives connected via USB and Firewire correctly send S.M.A.R.T. data over those interfaces.”
To get the SMART data, do not attach SATA hard disks through USB.
Is it possible to have a quick text synopsis of the comments made in the talk? For those of us who cannot watch videos at work, or don’t want to watch an hour-long presentation 🙂
A quick mention of XWF, 13.50.