• Home
  • Products
  • Training
  • Support
  • About Us
  • Forum
  • Sign In

Hidden Disk Areas - HPA/DCO

Discover
  • Find files faster
  • Search within files
  • Search for E-mails
  • Recover deleted files
  • Uncover User Activity
  • Collect system information
  • Password recovery
  • Hidden Disk Areas - HPA/DCO
  • Volume Shadow Copy
  • Web Browser
Identify
  • Verify and match files
  • Find misnamed files
  • Compare drive signatures
  • Timeline viewer
  • File viewer
  • Memory viewer
  • Binary String Extraction
  • Email viewer
  • Registry viewer
  • File system browser
  • Raw disk viewer
  • Thumbnail cache viewer
  • SQLite database browser
  • ESE database browser
  • Prefetch viewer
  • $UsnJrnl viewer
  • Plist viewer
  • Event Log Viewer
  • Web Server Log Viewer
Manage
  • Case management
  • Generate reports
  • Storage device management
  • Drive Imaging
  • Cloud Drive Imaging
  • Cloud Account Imaging
  • Rebuild RAID arrays
  • Portability
  • Secure case logging
  • Support

OSForensics™ can discover and expose the HPA and DCO hidden areas of a hard disk, which can used for malicious intent including hiding illegal data. The Host Protected Area (HPA) and Device Configuration Overlay (DCO) are features for hiding sectors of a hard disk from being accessible to the end user.

Detect and expose the hidden areas of a hard disk!

Detecting

OSForensics will first attempt to detect and display the size of the HPA/DCO hidden areas. If successfully found, they can be removed or imaged, exposing the hidden data.

Removing

Once the HPA and/or DCO hidden areas have been successfully detected, they can be removed so that the data hidden in those sectors can be accessed and analyzed by Raw Disk Viewer and other OSForensics modules.

Imaging

Alternatively, the HPA/DCO hidden areas can be preserved by creating an image of the hidden sectors and saving it into a file. This file can then be analyzed by other OSForensics modules such as the built-in file viewer.

Home
Discover Identify Manage
Contact Us Legal Disclaimer
Products
OSForensics OSForensics Bootable (USB Flash Drive) Rainbow Tables - 3TB hard disk
Training
Online Training Course Certification Exam - Online Triage Exam - Online Face-to-Face Classes 2022 Events Calendar
Support
Video Demonstrations FAQs and Tutorials OSForensics Forums Australian Head Office North American Branch

Copyright © 2022 PassMark™ Software