Hello,
Has anyone in the community experienced similar difficulties in imaging NVMes PCI Express SSDs?
I've got two Dell XPS P56F models and both have Toshibia NVMe 512GB SSDs.
I've tried using Tableau's NVMe adapter write blocker for imaging and this did not work.
I've tried multiple Forensic Boot Disks (Caine, Paladin, Deft Zero) and still no success roll
I'm not sure what else to try and therefore might consider trying live acquisition, but before I do this I wanted to reach out to the community and see as to whether anybody has any other suggestions or methods that have worked?
Thanks.
ssstu
You didn't follow up on your previous thread
https://www.forensicfocus.com/Forums/viewtopic/p=6591311/
Have you actually tried what was suggested?
What were the results?
Is it possible that the actual device has a non-standard pinout/connection?
*similar to* what happened here
https://www.forensicfocus.com/Forums/viewtopic/t=15577/
jaclaz
As per the thread above….. winfe is your best bet
Hello,
I've got two Dell XPS P56F models and both have Toshibia NVMe 512GB SSDs.
I had a DELL with a NVMe from Samsung as my very first NVMe ever a few weeks ago on my desk. Since i had no NVMe adapter, i had to buy a new write blocker with NVMe support. It is a
best regards, Robin
I had similar issues with an M.2 SSD the other day, tried a few adapters and various iterations of writeblockers to no avail. In the end I replaced it in the machine from whence it came and livebooted into Kali to do a DCFLDD.
Have you updated the firmware of the Tableau device?
I had issues until I upgraded, and I also found that I would have to turn on the tableau and then connect the cable that is connected to the Tableau unit that the hard drive is seated.