Using CAINE and AIR to wipe a drive

View previous topic View next topic Go down

Using CAINE and AIR to wipe a drive

Post  joetekno on Fri Feb 20, 2009 12:29 am

Drives that are not wiped can still contain data. Re-imaging them, Formatting them, etc does not remove the data that is on them. You should ALWAYS wipe a drive before imaging them for forensic analysis. You should ALWAYS wipe a drive before re-imaging and re-issuing them to other employees. You should ALWAYS wipe the drive before selling a computer.

These instructions are for wiping the first physical SATA drive.

Click the "Start" button and Select Caine...Caine Interface
Click the "Create Report" button
Click the "Collection" tab
Click the "AIR" button
If prompted "Do you want to delete previous log file?", Click OK
Click the "SDA" hard drive icon
Click the "Set as Dest" button
Click the "Zero" button
Click the "Set as Source" button
Click the "Start" button
Click the "Proceed" button
Click the "Show Status Window" button
Status Window will report "Command Complete" when it finishes

This MAY be a way to verify there is no data on the drive I have not tested it fully:
Open a terminal window
Type: xxd /dev/sda | grep -v 0
avatar
joetekno

Number of posts : 50
Località : Wisconsin, United States
Registration date : 2009-02-19

View user profile http://network.nwtc.edu

Back to top Go down

Re: Using CAINE and AIR to wipe a drive

Post  denis on Fri Feb 20, 2009 2:12 pm

xxd -a /dev/wiped_device

denis

Number of posts : 52
Località : Torino, Italy
Registration date : 2008-10-27

View user profile http://www.denisfrati.it

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum