Hi all,
I have a Dell XPS Laptop (Model P56F001) which has a NVMe PCIe SSD that I am struggling to image. I am hoping somebody in this community might have experienced this and can help?
I have tried various Forensic Boot Disks to image the device, but to no success (tried the latest version of Caine and Paladin).
I recently created a WINFE10 boot disk which I hoped would have worked, but unfortunately has not.
Like all Forensic Boot Disks I have used, the NVMe PCIe SSD doesn't appear when enumerating available disks to be imaged.
I suspect this to be a driver issue, but my research hasn't found an answer.
Has anyone out there had this issue as of yet?
Thank you.
WinFE is based on WinPE which is a stripped down Windows installation. The most likely explanation for the problem with WinFE is that the drivers for the PCI-e are missing from the image.
You can download the drivers from Dell here
http//
And then use DSIM to inject the drivers into the WinFE image. There is a walk through here for this procedure
http//
Jim
That or Linux can be your friend. A version such as Parrot Linux or Sparky Linux should have no problem finding a driver even in the live build. Then you can use gnu ddrescue to directly image the NVMe device. I've done it dozens of times without any issue.
Very informative thread.
Another imaging tool option https://
You can easily identify the necessary driver using the Computer Management Console. Attach the NVMe device and have a look at the devide properties. Then make sure you add the matching drivers to your Windows FE medium with the already mentioned "dism.exe" tool.