I recently had some hands-on time with a WiebeTech Forensic LabDock. Overall, I liked it, but I had some issues with it, such as it passing back a modified result for the drive model when queried via IOCTL. This was particularly annoying since this behavior was not documented. I wrote the WiebeTech but received no response. I am considering using it in a mITX portable acquisition box (similar in size to a FRED but much more functionality)
Has anyone else used the LabDock? Anything else undocumented to watch out for? I like the idea of a write blocker doing something to indicate its presence to the OS, and in a way that is readily discernible w/o proprietary software, but I think it should be thoroughly documented.
I also noted that like other WBs I have used, the support for S.M.A.R.T. queries is very poor (although many native and tailgate bridges have excellent S.M.A.R.T. support). In particular, the ability to query the error log and the number of reallocated sectors can be critical in some forensic cases. Can anyone comment on the ability of any other WBs to successfully pass sanitized S.M.A.R.T. queries?