Brett's Ramblings
No surprise. XWF does something other tools don't
From a twitter post, a cool video on imaging with X-Ways noted (13:50) as doing something other tools don't. The entire video is actually pretty good too.
http://youtu.be/zYYCv21I-1I
About the author
Comments 4
Brett: I saw Scott's presentation a few days ago and noticed the reference he made to X-Ways making a copy of the SMART table before and after imaging. Where is this information provided? If it's in the text file that's generated when the imaging is completed, I just looked a couple of these and all I get is "SMART: N/A (this request is not supported)" at the end of the text file.
"Depending on the type of interface being used, some S.M.A.R.T.-enabled motherboards and related software may not communicate with certain S.M.A.R.T.-capable drives. For example, few external drives connected via USB and Firewire correctly send S.M.A.R.T. data over those interfaces."
(http://en.wikipedia.org/wiki/S.M.A.R.T.#Visibility_to_host_systems)
To get the SMART data, do not attach SATA hard disks through USB.
By accepting you will be accessing a service provided by a third-party external to https://www.brettshavers.com/
DFIR Training
Be sure to check out my DFIR Training website for practically the best resources for all things Digital Forensics/Incident Response related.
© 2022 Brett Shavers