FastBloc SE Acquisitions
Beginning with EnCase 7, FastBloc SE is part of the basic feature set and is no longer an added-cost option.
About FastBloc SE
With this version of FastBloc, SE, you can use special drive controller software in EnCase to control reads and writes to attached evidentiary media. FastBloc SE can control writes to Plug and Play drives on USB, FireWire, and SCSI channels.
HPA and DCO
Earlier in this chapter, I discussed HPA and DCO, which are special protected areas of a hard drive that are ordinarily hidden from view. As you’ll recall, to view them in EnCase for DOS, you had to use the direct access mode.
With FastBloc SE, HPA and DCO support is present as long as the controller card in the forensics machine is ATA-6 ...
Get EnCE EnCase Computer Forensics: The Official EnCase Certified Examiner Study Guide, 3rd Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
