Loading...
Changes Saved.
Error Occurred!
Computer Forensics
Computer Forensics HardwareComputer Forensics SoftwareComputer Forensics TrainingComputer Forensics ServicesPurchase Forensic Computer ProductsTechnical SupportResellersCompany Information
Digital Intelligence Helpdesk

KnowledgeBase

HPA and DCO Handling

How do UltraBlocks handle HPA and DCO?

Upon detecting an IDE or SATA hard disk, Tableau bridges with HPA/DCO support (see above) will attempt to detect if the hard disk supports HPA or DCO and if HPA or DCO is being used to protect a region at the end of the hard disk.

If HPA is being used to protect a region at the end of the hard disk, the Tableau bridge will automatically use "volatile" HPA commands to override the HPA setting, automatically making the HPA region visible to the host computer so normal imaging tools can access the data in the HPA region.

If DCO is being used to protect a region at the end of the hard disk, the Tableau bridge will not automatically override DCO. To do so, the Tableau bridge would need to send a permanent (ie., non-volatile) command to the hard disk, and this would permanently alter the hard disk's DCO settings. Instead, Tableau plans to release utilities which can be used in conjunction with Tableau bridges in order to override the DCO settings at the explicit direction of the user.



Related Articles