Imaging a Dell Lati...
 
Notifications
Clear all

[Solved] Imaging a Dell Latitude 9410

3 Posts
3 Users
0 Likes
883 Views
(@krose4657)
Posts: 3
New Member
Topic starter
 

Good morning, I'm currently trying to create a forensic image of a Dell Latitude 9410. I tried using Caine, however, fdisk -l only shows loop0 and the device housing the Caine OS. This issue persisted across paladin and kali forensic mode. There is a previous post suggesting it has to do with the latitude's hard drive being a NVMe/PCIe drive. I have used this process on other devices with NVMe/PCIe drives and had no issues, and the disks were encrypted. The BIOS does not have legacy boot option under Advanced Boot Options, only "Enable UEFI Network Stack". I disabled secure boot. The only other thing I can think of BIOS-wise would be  to disable the TPM in the BIOS? That does not seem right to me though. Does anyone have any solutions or any resources you could point me towards to address this?

This topic was modified 2 years ago by krose4657
 
Posted : 04/02/2022 4:39 pm
minime2k9
(@minime2k9)
Posts: 481
Honorable Member
 

Try using DEFT, it added the support for NVME drives a couple of years ago.

I don't know which version of the other tools you have, but I imagine they are on an earlier kernel version without support.

 
Posted : 07/02/2022 11:38 am
 dega
(@dega)
Posts: 263
Reputable Member
 

There is also tsurugi Linux

 
Posted : 07/02/2022 1:11 pm
Share: