Hello,
Is there any way to acquire from a Dell Drive-locked drive? I have tried via writeblocker, which does not recognize the drive. The only way that has worked is booting from the original hardware, inputting the password then using a Forensic Linux Distro to acquire. In this particular case, the original machine is not available.
Any thoughts or experience?
Thanks,
This is not hard if you have the tools. D
- Get a donor drive with controller version as close to target drive as possible
- remove target drive controller
- remove donor drive controller
- desolder donor drive controller memory
- desolder target drive controller memory
- solder donor drive controller memory onto target drive controller
- put target drive controller back onto target drive
- pray
- power up and image[/listo]You can attempt to just swap controller, but the likelihood of that working well is low. The other problem can be if the memory you transfer not just contains the BBT but also the lock information.
mrgreen have fun
jhup have you had success with that process before?
I have to admit the thought of desoldering memory chips from an original evidence drive sends chills down my spine, you are a braver man than I P
I wouldn't recommend change the controller and replace the memory.
Maybe contact a forensic institute or HD recovery service they probably have the ability to remove the password.
An other option is contact the HD manufacturer, maybe they can help.
There are some commercial options like http//
Is this the 'Locking' that PC3000 will unlock?
Yes, I have. I actually, dump the information and sometimes manipulate the BBT so I can access areas deemed busted by the manufacturer.
Can it be done in your garage? Yes. Is it for a novice? No.
jhup have you had success with that process before?
I have to admit the thought of desoldering memory chips from an original evidence drive sends chills down my spine, you are a braver man than I P
Yes, I have. I actually, dump the information and sometimes manipulate the BBT so I can access areas deemed busted by the manufacturer.
Can it be done in your garage? Yes. Is it for a novice? No.
Hard core stuff, definitely not for the faint of heart )
Is this the ATA password lock or something else? ?
jaclaz
Thanks for all the responses.
Specifically this is the "Dell secure manager" drive lock. I am wondering if using similar computer model would work to get to the password splash screen, or if this is specifically tied to the original hardware.
JRFTS
Have you contacted DELL?
It may be specific hardware locked or the same make model may allow you to do what you are suggesting, but a quick email/phone call to DELL may answer that question for you before you try to source another laptop.