Brett: I saw Scott's presentation a few days ago and noticed the reference he made to X-Ways making a copy of the SMART table before and after imaging. Where is this information provided? If it's in the text file that's generated when the imaging is completed, I just looked a couple of these and all I get is "SMART: N/A (this request is not supported)" at the end of the text file.
"Depending on the type of interface being used, some S.M.A.R.T.-enabled motherboards and related software may not communicate with certain S.M.A.R.T.-capable drives. For example, few external drives connected via USB and Firewire correctly send S.M.A.R.T. data over those interfaces."
(http://en.wikipedia.org/wiki/S.M.A.R.T.#Visibility_to_host_systems)
To get the SMART data, do not attach SATA hard disks through USB.
Is it possible to have a quick text synopsis of the comments made in the talk? For those of us who cannot watch videos at work, or don't want to watch an hour-long presentation
By accepting you will be accessing a service provided by a third-party external to https://www.brettshavers.com/
Be sure to check out my DFIR Training website for practically the best resources for all things Digital Forensics/Incident Response related.
© 2023 Brett Shavers