| Author | Message | ||
     Richard Goldston Username: doctordos Registered: N/A |
The below message came from one of the new people in my old office of the Idaho State Police. Is there a way the X-ways can rebuild the raid? I am working my first case involving a RAID. The suspect’s PC has two 80GB hard drives in a Stripe RAID equaling 149.06GB – I have imaged each drive individually in EnCase and attempting to recreate the RAID in EnCase but keep getting an error: Error Reading: 2 sectors starting at sector 0 Wouldn’t both hard drives start reading at sector 0 or am I missing something? Thanks in advance. Matt Osterman, Computer Forensic Examiner Idaho State Police - Cyber Crime Unit | ||
| zhouyang Username: ozone Registered: 1-1997 |
you could try the winhex to rebuild raid0. | ||
| Jimmy Weg Username: jw Registered: 7-2006 |
Rich, I suggested (in another forum) that Matt consider XWF, which has never failed me when it came to rebuilding a simple two drive stripe. Another option was to boot the original with a forensically sound disc and acquire the logical volume(s). |