CAINE LiveCD
Would you like to react to this message? Create an account in a few clicks or log in to continue.

Using CAINE and AIR to wipe a drive

2 posters

Go down

Using CAINE and AIR to wipe a drive Empty Using CAINE and AIR to wipe a drive

Post  joetekno Fri Feb 20, 2009 12:29 am

Drives that are not wiped can still contain data. Re-imaging them, Formatting them, etc does not remove the data that is on them. You should ALWAYS wipe a drive before imaging them for forensic analysis. You should ALWAYS wipe a drive before re-imaging and re-issuing them to other employees. You should ALWAYS wipe the drive before selling a computer.

These instructions are for wiping the first physical SATA drive.

Click the "Start" button and Select Caine...Caine Interface
Click the "Create Report" button
Click the "Collection" tab
Click the "AIR" button
If prompted "Do you want to delete previous log file?", Click OK
Click the "SDA" hard drive icon
Click the "Set as Dest" button
Click the "Zero" button
Click the "Set as Source" button
Click the "Start" button
Click the "Proceed" button
Click the "Show Status Window" button
Status Window will report "Command Complete" when it finishes

This MAY be a way to verify there is no data on the drive I have not tested it fully:
Open a terminal window
Type: xxd /dev/sda | grep -v 0
joetekno
joetekno

Number of posts : 50
Località : Wisconsin, United States
Registration date : 2009-02-19

http://network.nwtc.edu

Back to top Go down

Using CAINE and AIR to wipe a drive Empty Re: Using CAINE and AIR to wipe a drive

Post  denis Fri Feb 20, 2009 2:12 pm

xxd -a /dev/wiped_device

denis

Number of posts : 52
Località : Torino, Italy
Registration date : 2008-10-27

http://www.denisfrati.it

Back to top Go down

Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum