Image laptop throug...
 
Notifications
Clear all

Image laptop through Boot CD + USB

20 Posts
9 Users
0 Reactions
1,689 Views
(@forensicakb)
Reputable Member
Joined: 16 years ago
Posts: 316
Topic starter  

Had something come up which I haven't run into before and wondered if someone else has.

There was a very difficult laptop to be imaged (previous IT person had stripped 2 screws, so getting to the laptop drive was not possible) Win XP (don't remember make and model) Wanted to try a boot CD and then imaging through an external USB, but there wasn't an option for boot to CD, just boot from HD.

So if you can't boot from CD, USB option is out also, and you can't yank the drive, what options would you offer?

What boot package is everyone using from a USB (not CD) Helix, SPADA, Paladin? I know Paladin pro is from USB, wanted to try out a few free ones first.

Many thanks.


   
Quote
(@miket065)
Estimable Member
Joined: 21 years ago
Posts: 187
 

1) Flash the BIOS maybe with a newer version that support CD/USB boot.
2) Destroy the case to get to the hdd.


   
ReplyQuote
(@forensicakb)
Reputable Member
Joined: 16 years ago
Posts: 316
Topic starter  

Thank you Mike for your reply.

Flash the bios not an option
Destroy the case not an option.

Company may be willing to turn the computer on and agree to stipulation that some times will be changed.


   
ReplyQuote
(@xennith)
Estimable Member
Joined: 15 years ago
Posts: 177
 

So if you can't boot from CD, USB option is out also

How do you figure this? USB boot is configured seperatly from CD boot.

I'd drill the screws out tbh.


   
ReplyQuote
digintel
(@digintel)
Trusted Member
Joined: 17 years ago
Posts: 51
 

Thank you Mike for your reply.

Flash the bios not an option

Company may be willing to turn the computer on and agree to stipulation that some times will be changed.

Hmm.. A puzzle 😉

Screws drill them out, or take a small circular cutting device, and cut a slit in
it.

When you say that flashing the BIOS is not an option, is that because it's password protected? Some BIOSes can be flashed by hardware modifications, so it might still be worth trying.

Otherwise, is it possible to get to the HD from the other side?

Roland


   
ReplyQuote
(@forensicakb)
Reputable Member
Joined: 16 years ago
Posts: 316
Topic starter  

Hi Xennith, thanks for your reply.

I only said that because in the BIOS the only choice was boot to HD, no other choices available.

On many other units the choice would be

CD
USB
HD

That was not the case here.

What would be your choice if the computer could be powered on?
FTK imager on a thumb drive?

So if you can't boot from CD, USB option is out also

How do you figure this? USB boot is configured seperatly from CD boot.

I'd drill the screws out tbh.


   
ReplyQuote
(@forensicakb)
Reputable Member
Joined: 16 years ago
Posts: 316
Topic starter  

Digintel,

Thank you also for your reply.

Let's say the other side has already said that you are granted access to the computer to make an image, no modifications can be made.

Other side does not have HD, only HD is in the laptop itself.

Let's also say that if this were you that you would fight any and all efforts above the basic image including flashing and drilling. You would go to the court and play this out to potentially be abusive and destructive.

So would you use FTK imager lite on a thumb drive?

Thank you Mike for your reply.

Flash the bios not an option

Company may be willing to turn the computer on and agree to stipulation that some times will be changed.

Hmm.. A puzzle 😉

Screws drill them out, or take a small circular cutting device, and cut a slit in
it.

When you say that flashing the BIOS is not an option, is that because it's password protected? Some BIOSes can be flashed by hardware modifications, so it might still be worth trying.

Otherwise, is it possible to get to the HD from the other side?

Roland


   
ReplyQuote
(@patrick4n6)
Honorable Member
Joined: 16 years ago
Posts: 650
 

There is a way to drill out the screws without damaging the chassis. I can't see how any reasonable person would object to that. I'd tell you how it's done, but I had a guy back when I worked at the coppers who would do it for me when I asked, so I didn't have to figure it out.


   
ReplyQuote
(@forensicakb)
Reputable Member
Joined: 16 years ago
Posts: 316
Topic starter  

Thank you for your reply Patrick4n6.

What would your suggestion be since drilling is not an option.

There is a way to drill out the screws without damaging the chassis. I can't see how any reasonable person would object to that. I'd tell you how it's done, but I had a guy back when I worked at the coppers who would do it for me when I asked, so I didn't have to figure it out.


   
ReplyQuote
(@miket065)
Estimable Member
Joined: 21 years ago
Posts: 187
 

What boot package is everyone using from a USB…? .

I like Raptor from Forward Discovery…


   
ReplyQuote
Page 1 / 2
Share: