Touch Screen PCs

Why would you treat a PC with a touch screen any differently from a normal laptop computer? What's special about the touch screen that would cause you to use a different process?
(e.g. Booting your preferred imaging tool from USB and take an image of the disk to an external HDD).

Because on a normal laptop I take the drive out.

Why would you treat a PC with a touch screen any differently from a normal laptop computer? What's special about the touch screen that would cause you to use a different process?
(e.g. Booting your preferred imaging tool from USB and take an image of the disk to an external HDD).

I'm curious about why you are concerned with voiding the warranty. If it's a criminal case then the warranty is probably the last of the suspect's concern.

I noticed the same about the hard drive size, I believe this was an attempt on the manufacturer's part to future proof the device for a while by putting in the maximum size disk available so that upgrading wasn't such a concern.

I personally relish dismantling exhibits, it's like a giant puzzle, but it's always possible to get the HDD out. Why do you believe it's not possible to get the HDD's out?

I didn't say what kind of case it was on purpose, it really has no relevance on the original question.

Here in the states in any event you do not void a warranty on a machine, you just don't do it. Unless, you personally want to be liable as being the person who did that and subjected to questions on why you did that when it's all over "WARRANTY VOIDED UPON BROKEN SEAL"

If I was instructed that the sticker could be removed and that it wasn't a big deal thats a different story. In this case I was just searching for how others handle these situations, or what methods they are using.

I'm curious about why you are concerned with voiding the warranty. If it's a criminal case then the warranty is probably the last of the suspect's concern.

I noticed the same about the hard drive size, I believe this was an attempt on the manufacturer's part to future proof the device for a while by putting in the maximum size disk available so that upgrading wasn't such a concern.

I personally relish dismantling exhibits, it's like a giant puzzle, but it's always possible to get the HDD out. Why do you believe it's not possible to get the HDD's out?

Here in the states in any event you do not void a warranty on a machine, you just don't do it. Unless, you personally want to be liable as being the person who did that and subjected to questions on why you did that when it's all over "WARRANTY VOIDED UPON BROKEN SEAL"

Don't laptops have similar provisions?
As a matter of fact I also had one desktop with such a sticker.

Personally I think that taking the disk out of a machine is still the more "appropriate" approach, maybe it is something to talk with your insurance, having the (I presume rare) case of a device you had to put your hands on fail within the residual Warranty period AND failing because of something that is actually covered by the said Warranty.

I mean, you have a laptop that you can "open", you get the disk from it, you image it allright, BUT (by mistake, distraction, whatever) the laptop falls on the floor from your desk and the screen breaks.

Who will pay the damages?

What if a laptop or desktop that you got the disk out from had been already (fiction) had the disk removed 49 times 😯
http//wdc.com/en/products/resources/drivecompatibility/

eSATA and internal SATA cables and connectors cannot be used interchangeably. This is important since eSATA cables and connectors are designed for 5000 insertion and removal cycles while internal SATA cables and connectors are designed for only 50 insertion and removal cycles.

and when you put it back the SATA connection doesn't work anymore (or fails soon after)?

jaclaz

Hi Jaclaz,

How you been?

Yes, you are right laptops have the same warnings sometimes. Most all the laptops I deal with are out of warranty period, or you are given the green light from HR, or someone in the company to do work, OR the people in IT have already opened it up at some point to add more ram, clean out dust bunnies, or a variety of other things.

I also like removing the drives, this is just one of those instances where it's not possible. To the best of my memory I've won several cases by removing the drives and putting the drives in service date at a point contrary to what the defendant was claiming (old drive removed, new one with old data put in and pawned off to both parties that this was the real deal, when it was an awful cut/hack job.)

Here in the states in any event you do not void a warranty on a machine, you just don't do it. Unless, you personally want to be liable as being the person who did that and subjected to questions on why you did that when it's all over "WARRANTY VOIDED UPON BROKEN SEAL"

Don't laptops have similar provisions?
As a matter of fact I also had one desktop with such a sticker.

Personally I think that taking the disk out of a machine is still the more "appropriate" approach, maybe it is something to talk with your insurance, having the (I presume rare) case of a device you had to put your hands on fail within the residual Warranty period AND failing because of something that is actually covered by the said Warranty.

I mean, you have a laptop that you can "open", you get the disk from it, you image it allright, BUT (by mistake, distraction, whatever) the laptop falls on the floor from your desk and the screen breaks.

Who will pay the damages?

What if a laptop or desktop that you got the disk out from had been already (fiction) had the disk removed 49 times 😯
http//wdc.com/en/products/resources/drivecompatibility/

eSATA and internal SATA cables and connectors cannot be used interchangeably. This is important since eSATA cables and connectors are designed for 5000 insertion and removal cycles while internal SATA cables and connectors are designed for only 50 insertion and removal cycles.

and when you put it back the SATA connection doesn't work anymore (or fails soon after)?

jaclaz

Encase Portable is a good solution for machines were you cannot open them up for some reason and it is very inexpensive as forensic tools go.

Helix is so out of date now we rarely use it.

Paladin is a free bootable tool so that is up to date if you are going the bootable CD route. They have it for PCs and MACs.

To add to Larry's comment - I haven't tried it on a touchscreen yet, but DEFT 7.1 has been knocking it out of the park for me on almost every computer I've tried. I've thrown old Wintel desktops, new Wintel laptops, and Apple MacBooks at it - this puppy boots 'em all. Additionally, it recognizes all the eSATA and USB 3.0 ExpressCard adapters I have. It's truly amazing.

But I do agree that a dead acquisition is the best option.