IMAGING
Logicube Forensic Falcon™ User’s Manual 47
5.0.3.3 Error Handling
This is a setting that can be found in Drive to Drive and Drive to
File modes. When bad sectors are encountered on the Source
drive, Falcon can either skip the bad sectors or abort the
imaging operation. This allows flexibility on what to do when
bad sectors are found on the Source drive.
When bad sectors are encountered, and error
handling is set to Skip, Falcon will write a zero on
the corresponding sector or position in the
Destination drive or file.
Falcon also has a setting for error granularity. There are 3
options:
1 sector (512 Bytes)
4096 Bytes (8 sectors)
64 KIB (128 sectors)
When a bad sector on the source drive is found, by default, it
will skip that sector. Changing the granularity allows more
sectors to be skipped.
A cluster size represents the smallest amount of disk space that
can be used to hold a file. The most common cluster size for an
NTFS volume, for example, is 4KB (4096 Bytes). This means that
the smallest amount of space that will be used for a file is 4096
Bytes.
As an example, if 4096 Bytes is chosen, and one of the 8 sectors
in that cluster size contains a bad sector, the Falcon will skip the
entire cluster (or 4096 bytes or 8 sectors).
To Next Page
Loading...
Need help?
General
