Dealing With Media Errors

Acquisitions are still possible if the percentage of bad sectors is small.

The tool must be able to deal with the errors:

  • place zeros on the bad sectors, so the data keeps its alignment.

  • Otherwise, the forensic copy would be smaller and the analysis tool could trigger errors.

  • The tool must register in a log file all the identified bad sectors.

  • Tools should automatically decrease the acquisition block size to the sector size.

Last updated