Hi!
I am trying to image a SAS drive, without success! I am using a tableau SATA bridge which is connected to a SATA to SAS adapter which in turn connects to the SAS Hard drive. Any ideas how how I should do this?
Thanks
By "No Success", what exactly do you mean? Is your device being recognised at all?
My preferred method of imaging SAS disks is via the original hardware, using a Helix or Linen boot disk.
Which SATA to SAS adapter are you trying?
By no succes, I mean that the SATA Detect light on the tableau is not lighting up and the hard drive is not spining. Everything else appears to be working ok.
I am not sure of the make and model number of the SAS to SATA converter. The machine that I am imaging is a Dell T7400 and the converter came attached to the SAS drive.
Thanks
I don't think that setup will work for you. I think your best bet is to attach a USB Drive to the workstation and image the SAS disk via a Helix boot disk. I've done this a few times and it's the fastest and easiest approach.
If you access to Digital Detective then you'll see that they've discussed this at length recently. One of the options that was discussed concerned a Windows boot disc, Windows FE. Also see http//forensicsfromthesausagefactory.blogspot.com/.
If i am correct the SAS-> SATA converter only works the other way around.
You can connect a SATA disk to a SAS controller, but not a SAS disk to a SATA controller.
buy a retail SAS raid controller, install it in your forensic workstation and boot your workstation with helix to see if helix has a drivermodule available for your SAS controller.
If that works you can also connect the drive (it is hot swap, but it may be wise to first shutdown your workstation) and image the drive with a tool like linen or dcfldd
Steffen