Menu
  • Home
  • Brett's Blog
  • My Books
  • Courses
  • About Me
  • Contact
  • Home
  • Brett's Blog
  • My Books
  • Courses
  • About Me
  • Contact

Brett Shavers | Ramblings

Brett's Ramblings

Subscribe to blog
Unsubscribe from blog
Settings
Sign In
If you are new here, Register
  • Forget Username
  • Reset Password
Font size: + –
Subscribe to this blog post Unsubscribe
Report
Print
1 minute reading time (28 words)

No surprise. XWF does something other tools don't

Digital Forensics
Brett Shavers
Tuesday, 28 January 2014
2704 Hits
4 Comments

From a twitter post, a cool video on imaging with X-Ways noted (13:50) as doing something other tools don't.  The entire video is actually pretty good too.

xwf

http://youtu.be/zYYCv21I-1I

Tweet
Share on Pinterest
0
Tags:
X-Ways Forensics
WinFE has some street cred with the Scientific Wor...
WFA/4e

About the author

Brett Shavers

Brett Shavers

 

Comments 4

Guest
Guest - Phil Rodokanakis on Tuesday, 28 January 2014 09:10

Brett: I saw Scott's presentation a few days ago and noticed the reference he made to X-Ways making a copy of the SMART table before and after imaging. Where is this information provided? If it's in the text file that's generated when the imaging is completed, I just looked a couple of these and all I get is "SMART: N/A (this request is not supported)" at the end of the text file.

0 Cancel Reply
Brett: I saw Scott's presentation a few days ago and noticed the reference he made to X-Ways making a copy of the SMART table before and after imaging. Where is this information provided? If it's in the text file that's generated when the imaging is completed, I just looked a couple of these and all I get is "SMART: N/A (this request is not supported)" at the end of the text file.
Cancel Update Comment
Guest
Guest - Stefan Fleischmann on Friday, 14 March 2014 02:43

"Depending on the type of interface being used, some S.M.A.R.T.-enabled motherboards and related software may not communicate with certain S.M.A.R.T.-capable drives. For example, few external drives connected via USB and Firewire correctly send S.M.A.R.T. data over those interfaces."
(http://en.wikipedia.org/wiki/S.M.A.R.T.#Visibility_to_host_systems)

To get the SMART data, do not attach SATA hard disks through USB.

0 Cancel Reply
"Depending on the type of interface being used, some S.M.A.R.T.-enabled motherboards and related software may not communicate with certain S.M.A.R.T.-capable drives. For example, few external drives connected via USB and Firewire correctly send S.M.A.R.T. data over those interfaces." (http://en.wikipedia.org/wiki/S.M.A.R.T.#Visibility_to_host_systems) To get the SMART data, do not attach SATA hard disks through USB.
Cancel Update Comment
Guest
Guest - Brian Baskin on Wednesday, 29 January 2014 23:36

Is it possible to have a quick text synopsis of the comments made in the talk? For those of us who cannot watch videos at work, or don't want to watch an hour-long presentation

0 Cancel Reply
Is it possible to have a quick text synopsis of the comments made in the talk? For those of us who cannot watch videos at work, or don't want to watch an hour-long presentation :)
Cancel Update Comment
Guest
Guest - Brett Shavers on Thursday, 30 January 2014 02:17

A quick mention of XWF, 13.50.

0 Cancel Reply
A quick mention of XWF, 13.50.
Cancel Update Comment
Guest
Sunday, 24 September 2023

Captcha Image

By accepting you will be accessing a service provided by a third-party external to https://www.brettshavers.com/

direct link

DFIR Training

Be sure to check out my DFIR Training website for practically the best resources for all things Digital Forensics/Incident Response related.


Brett's blog

© 2023 Brett Shavers