HELP - Re-constructing RAID in Encase Synology NAS (DS1512+)

Hi,
I strongly recommend trying ReclaimePro(just Google it..) or even the free version of Reclaime….Just mount each of your E01 image using FTK Imager….. it does a great job. I recently reconstructed half a dozen of RAID of various flavors and had no problem detecting and imaging the Raid container.

Hi,
I strongly recommend trying ReclaimePro(just Google it..) or even the free version of Reclaime….Just mount each of your E01 image using FTK Imager….. it does a great job. I recently reconstructed half a dozen of RAID of various flavors and had no problem detecting and imaging the Raid container.

Thanks for your response shark007 but I am using the free version of Reclaime and it didn't help. I will try and persist with it tomorrow and see what happens. To be honest I was trying to play with the other product RAID Reconstructor.

Question, does Reclaime like the Linux based/built RAIDs?

Yes Reclaime PROit does deal with Linux RAID. Now, it is possible that the free version may not detect as many kind of RAID than the paid version. I used the paid version to recover the Linux Raid and had no problem.

The other option of course would be to clone your drives and connect them all to a PC and boot with Raptor Forensics. Or I suppose you could also to in VM. I used Raptor to detect Raid and image the Raid container.

Hope this helps.

I had to do this back in the day, ill try to find what i did.

I just remeber i had an image of each drive blown back to a hard drive, so a linux vm with both drive connected. There a command to mount it in linux, trying to find the article online. But search mounting synology raid in linux.

Sorry couldn't help if i find the info i used will update.

Yes Reclaime PROit does deal with Linux RAID. Now, it is possible that the free version may not detect as many kind of RAID than the paid version. I used the paid version to recover the Linux Raid and had no problem.

The other option of course would be to clone your drives and connect them all to a PC and boot with Raptor Forensics. Or I suppose you could also to in VM. I used Raptor to detect Raid and image the Raid container.

Hope this helps.

I downloaded the ReclaiMe Pro last night and used it today but it would not detect the settings. I have since created a support ticket with the vendor. -(

Yes Reclaime PROit does deal with Linux RAID. Now, it is possible that the free version may not detect as many kind of RAID than the paid version. I used the paid version to recover the Linux Raid and had no problem.

The other option of course would be to clone your drives and connect them all to a PC and boot with Raptor Forensics. Or I suppose you could also to in VM. I used Raptor to detect Raid and image the Raid container.

Hope this helps.

I have run ReclaiMe Pro, and plugged the two hard drives into a USB port via write blockers.
ReclaiMe Pro has detected a RAID 0 - LDM Partition 6 and LDM Partition 7.

How would I replicate this RAID in Encase? I still need to obtain stripe size, etc. Do I simply click on Entropy Analysis and let it run its course? It appears it will take a while to run.

Thanks for your help!

Wait a minute, a two-partition RAID 0 out of five disks? 😯
A peculiar setup IMHO.

jaclaz

At this point, you should be able to see and point in Reclaime Pro to the `Raid container`including those two partitions. The way you described what you see, it is very likely you are dealing with mirror drives. If you are not sure, just select the option on the right to image each container/partitions in a Raw format or VHD or VHDX. Then use your favorite tool (in my case, XWays beats everybody out there by a mile…) to open up the container and look what is inside.

You could also use Reclaime Pro to actually scan those partitions and see what is inside and recover from Reclaime Pro as well…

Hope this helps