Host Protected Area (HPA) Imaging

Question

I'm a student in the Digital Forensics department. I have to create an image of the HPA of my disk. I searched whole documents about creating HPA image ways but all of them are old methods. For instance, The Sleuth Kit version 1.7.3 allows to create it but it was released in 2003 and the newest versions of TSK have no option to do that. I wonder that is there any way to create and investigate HPA part of my disk.

score 1 · Accepted Answer · answered Feb 25 '20 at 20:18

1

It can be done with native Linux commands but HDAT2 makes life much easier.

From their documentation:

HDAT2

answered Feb 25 '20 at 20:18

user10216038

7,552
2
16
19

Thanks, sir. Also, I found that OsForensics Application (Windows) can create HPA Image. – Ahmet Furkan Aydogan Feb 26 '20 at 17:40

Host Protected Area (HPA) Imaging

1 Answers1