Page tree
Skip to end of metadata
Go to start of metadata

Scope

The 'Disk images' operation will create a disk image and also create a logical copy of the files for further analysis.  This job type will be used with:

  • Data CDs / DVDs (as opposed to DVD-Video or Compact Disc Digital Audio)
  • 3.5" floppy disks
  • 5.25" floppy disks
  • Zip disks
  • Other (primarily internal hard drives, unless the drive is accessible via the Windows workstation's File Manager).

General Operation

To begin the operation, select the 'Disk image' job type and select the appropriate media type.  After you have ensured that the media is write-protected (see the appropriate section of Identifying and Handling of Legacy Media for specific instructions), attach or insert the media, check the box next to 'Attached?', and click the 'Transfer' button:

The Ingest Tool will use the ddrescue application to read the disk and attempt to recover any data in a disk image.  Note that this program will make two separate passes across the disk (and the second pass may include up to three attempts to read the disk); as a result, it may take some time to complete the operation. 

After the disk image has been created, the Ingest Tool will attempt to replicate a copy of the files for additional analysis.  Depending on the file system on the image, the Tool will use TeraCopy, tsk_recover, or unhfs to replicate data.  Once this process completes, the CMD.EXE will display the number of files copied and an indication to proceed to content analysis:

Special Instructions for 5.25" Floppies

If you are creating a disk image for a 5.25" floppy disk, you must select the '5.25" fd' option and choose the appropriate disk type from the drop-down menu to the immediate right. 

NOTE: see Identifying Disk Types for 5.25" Floppies for more information and detailed instructions on using the FC5025 software to review disks.  Be sure to write protect the 5.25" floppy before inserting into the drive.

After selecting the disk type, verify that the disk is in the drive and check the 'Attached?' box :

Once the job has been configured, click the 'Transfer' button to initiate capture.

Special Instructions for Internal Hard Drives (Other)

If it is necessary to create a disk image of an internal hard drive (or a particular partition of a drive), it will be necessary to identify the device name of the drive and/or partition.  Before you attach the internal drive to a write blocker (see Identification and Handling for Internal Hard Drives for more information), open a Windows CMD.EXE window and enter the following command:

cat /proc/partitions

This command will read the proc/partitions file, which contains a table listing partitioned devices and their respective names in /dev.  Sample output will be something like:

Now attach the drive to the appropriate Tableau write blocker and rerun the above command.  The /proc/partitions file will list the newly attached drive among the device names (see drive 'sdc' with three partitions, the last of which--sdc3–is the one we want):

NOTE: consult with the BDPL manager to identify the appropriate device name.

Once the appropriate target has been identified, select the 'Disk image' job type, select 'Other' as the media type, and then enter the device name in the 'Name' text box (in this example, 'sdc3').  You'll also check the box next to 'Attached?' after verifying that the drive is connected:

Once the job has been configured, click the 'Transfer' button to initiate capture.

  • No labels