The disk imaging device for Forensic Data Recovery
As a forensic data recovery professional, you know how important it is to work from an accurate, stable hard drive image. Unfortunately,
traditional disk imaging tools and methods are designed to deal with intact hard drives, not the unstable ones with bad sectors that
are your stock-in-trade. Drives stop responding, disks degrade or fail under intensive reading, valuable files remain locked in bad sectors.
But now there's a better way: DeepSpar Disk Imager is the first dedicated imaging device built to handle disk-level problems.
DeepSpar Disk Imager Forensic Edition is a portable version of DeepSpar Disk Imager Data Recovery Edition with addition of forensic-specific functionality.
Highlights of DeepSpar Disk Imager (Forensic Data Recovery)
- DeepSpar Disk Imager makes an imaging process "visual", so you see the read status of each retrieved sector (i.e. whether the sector is integral, partially
corrupted or unreadable), what data is being imaged (i.e. whether you are imaging used or unused space of the drive), and what type of files you are imaging (i.e.
Pictures, Microsoft Office files, executables, etc.)
- Stop and continue imaging as needed - configuration information is saved on the destination drive, so you can just select "continue imaging" to continue from wherever you stopped.
- The map of good/bad/unprocessed sectors is saved in HPA area of the destination drive, so you have integrity status of each sector of the image, which improves quality of the acquired data.
- Special vendor-specific ATA commands are used to disable Auto-Relocation of bad sectors so that you retrieve data rather then lose it due to the fact that
the drive modifies data by itself (remaps bad sectors). Read more about this process in our whitepaper "Disk Imaging: A Vital Step in Data Recovery".
Highlights of DeepSpar Disk Imager (Data
Recovery)
- DeepSpar Disk Imager is able to retrieve up to 90 percent of bad sectors that are partially corrupted and cannot be cloned/imaged by ordinary means.
- While system software, such as BIOS or OS, tries to prevent you from retrieving and copying corrupted data, DeepSpar Disk
Imager bypasses it to give you access to all available data, good and bad.
- Special vendor-specific ATA commands are used that pre-configure the hard drive for imaging, reduce the number of read
operations and the intensity of the operations, which causes disk degradation.
- DeepSpar Disk Imager reduces the time it takes to image a disk with bad sectors, doing in hours what could take days or even weeks with ordinary clone/image tools.
- Failing hard drives are imaged with care and intelligence, using as few passes as possible to get the most information.
- Stop and continue imaging as needed - configuration information together with the map of good/bad/unprocessed sectors are saved on the destination drive, so
whenever you stop you will have the read status of each imaged sector.
- The imaging hardware automatically resets/reboots drives that become unresponsive to continue imaging process, so you don't
need to stand around watching and waiting for the entire system to be rebooted.
- Real-time reporting gives you a window on the type and quality of data you're imaging - while the process is still underway.
You can even see the number and type of files or OS structure elements imaged so far.
- You have total control over imaging parameters: single or multiple passes, read timeouts, retry attempts, bad sector retrieval (Error Correction Code (ECC)
processing), selectable ATA read commands, and error-dependent imaging algorithm based on UNC/AMNF/IDNF/ABRT bad sectors or read/ready timeouts. This gives you
ability to apply all possible methods to retrieve data from bad sectors of partially failed hard drives in multiple passes.
To learn more about the subject: