| <<< disk drive geometry, cont. | Index | bit >>> |
What are some of the problems that the BIOS and hard disk drive translations can cause for a forensic examiner?
First, problems acquiring and imaging the drive in the first place. The BIOS on the examiner's computer must be able to deal with drives of all sizes, possibly including the ability to manually set the drive parameters.
Second, an examiner could get caught in is trying to explain at trial about CHS and LBA issues:
Although irrelevant to the actual case at hand, a misdirection by opposing counsel might attempt to make an issue less clear: "If the disk drive says that it has 64 heads and we actually see only 8, why would we believe that anything else is what it purports to be?"
(Hopefully, friendly counsel will successfully object to this question and obviate the need for the examiner to explain this at trial.)
| <<< disk drive geometry, cont. | Index | bit >>> |