Imaging SAS drives

Been playing with the wiebeTECH RedPort SAS adapter. Not ready to make any pronouncements yet, but it is one of the only options available that I have found.

Thanks BitHead haven't seen that one, there doesn't seem to be much out there does there?

$719.00 as well! 😯

Jonathan

I have not had chance to try these yet, however they do appear very similar to ones that are used in ICS imaging products.

They are certainly worth a try in the short term.

I have also previously installed a SAS host adaptor in a linux machine and used LinEN to acquire SAS disks, however I believe the card was quite expensive.

Hope this helps.

Jonathan

I have not had chance to try these yet, however they do appear very similar to ones that are used in ICS imaging products.

They are certainly worth a try in the short term.

Nice find! At that price it's worth a shot, and I've just ordered one. Not come across any SAS drives as yet, just trying to make sure that I'm prepared if I do. I'm minded to image them in-situ if possible.

Jonathan

Once you have had a chance to try these adaptors, could you possibly let me know whether or not they worked?

Many Thanks

James

Will do.

last time I done one of these it was a right pain. The only way I got it was to attach a laptop via network cable, boot the target with a helix disk and netcat across to the laptop (or at least to a usb drive on the laptop). Worked but took quite a while.

Raptor worked for me on a newer Dell desktop with SAS drives.

There was a write up on using Windows FE and a HighPoint RocketRAID card (<$150) to image SAS drives. I can't find the paper online, but the instructions were- Build a WinFE boot CD and inject the drivers; plug in the card in your forensic machine; attached the SAS drives; boot to WinFE and image away. The paper said the imaging speed was ~5GB/min.

I'm sure other boot CD/USB's can do the same.