Notifications
Clear all

Altering of data?

5 Posts
3 Users
0 Reactions
812 Views
(@cmjdurkin)
Active Member
Joined: 16 years ago
Posts: 8
Topic starter  

I was recently working on a case in which I was trying to virtualise a suspects drive. After attempting to do it several times I gave up as there was some hardware issues with VMWare.

I then had the idea to restore the image of the suspects drives onto an identical drive and replace that inside the suspects machine, ultimately booting it up and effectively having exactly the same system. In the end I decided not to as I couldnt be sure that no data would change ie BIOS etc.

Does anyone know for sure whether or not there is an issue with doing this, and if so explain )

Many thanks


   
Quote
jhup
 jhup
(@jhup)
Noble Member
Joined: 16 years ago
Posts: 1442
 

Let me understand what you have done.

You imaged a target machine.
The image is now sequestered, and you have duplicated the image to have a working copy.

You attempted to virtualize this working copy image, but failed.

You took the working copy and cloned it onto a matching HDD.

You installed the clone in the target machine, and wondering if it will change something.

Yes, there is a possibility (I cannot give you probability, but never happened to me) that somehow the BIOS will get impacted by the clone drive (re-flashes it, or similar).

As for the clone drive changing - it is irrelevant, as it is a copy of the working copy of the master image, correct? So, worse case scenario, you just re-clone the drive from your working image.

Or, did I miss something?


   
ReplyQuote
(@cmjdurkin)
Active Member
Joined: 16 years ago
Posts: 8
Topic starter  

No you haven't missed something )

I undesrtand that it is irrrelevant if the working copy alters, I just wanted clarification with regards to the BIOS, and whether or not anyone has had any issues with the BIOS being altered after dong this.

Thanks for the reply

Chris


   
ReplyQuote
(@angrybadger)
Estimable Member
Joined: 18 years ago
Posts: 164
 

I was recently working on a case in which I was trying to virtualise a suspects drive. After attempting to do it several times I gave up as there was some hardware issues with VMWare.

I then had the idea to restore the image of the suspects drives onto an identical drive and replace that inside the suspects machine, ultimately booting it up and effectively having exactly the same system. In the end I decided not to as I couldnt be sure that no data would change ie BIOS etc.

Does anyone know for sure whether or not there is an issue with doing this, and if so explain )

Many thanks

did you use liveview or VFC when you were building the virtual machine ?


   
ReplyQuote
(@cmjdurkin)
Active Member
Joined: 16 years ago
Posts: 8
Topic starter  

I used liveview and then attempted it in an evaulation copy of VFC.

We are soon to be getting VFC so will try it out when the dongle arrives and see if there is any success.

Chris


   
ReplyQuote
Share: