Dealing With Media Errors
Last updated
Last updated
Acquisitions are still possible if the percentage of bad sectors is small.
The tool must be able to deal with the errors:
place zeros on the bad sectors, so the data keeps its alignment.
Otherwise, the forensic copy would be smaller and the analysis tool could trigger errors.
The tool must register in a log file all the identified bad sectors.
Tools should automatically decrease the acquisition block size to the sector size.