the most granular level possible, which is individual sectors. Exhaustive mode will
ensure the maximum amount of recoverable data, but it will also add time to the job.
The default setting is Standard.
Retry Count: This tells the TD4 how many times to attempt to re-read a given block
of data when an error is encountered. The options are: 0, 1, 10, and 100. The default
setting is 1.
Caution
A retry count setting of 100 is not recommended. If a read continually
errors over 10 attempts, it is likely it will never succeed, and continuing to
attempt many failed reads could potentially damage an already failing
drive and waste valuable investigation time.
Compression: Allows selection of data compression for E01, Ex01, and LX01
outputs. Selecting the box will ensure that data compression is used whenever
possible. The default setting is to compress when possible.
Evidence File Path: Allows definition of the specific filename and directory for
output files. Note that wildcards can be used to automatically enter key information
into the filenames and/or output directory, as follows:
Wildcard Directory/filename data
%d Date (current system date at time of acquisition)
%t Time (current system time at time of acquisition)
%e Evidence ID for the source drive in use
%s Serial number of the source drive in use
%m Model number of the source drive in use
%c Case ID at time of acquisition
The default filename is image. The default directory name is td4 images/%d_%t/.
Readback Verification: Allows selection of readback verification to be done at the
end of the duplication/logical image portion of jobs, to ensure the stored data
matches what was acquired. Selecting the Verify box will enable readback
verification for all jobs. Selecting Prompt will allow readback verification to be
enabled at job startup time. The default setting is Verify.
Trim Clones: Allows selection of the desired destination “trimming” configuration
for all jobs. Trimming a destination drive means that a DCO or AMA will be applied
to the destination drive (if it supports them) so that the destination drive size will
appear to match that of the original clone source drive. The options are: Never,
When possible, and Prompt. Selecting Prompt will allow the Trim Clones setting to
be selected at job startup time. The default setting is Never.
Note: For clone trimming to work, the chosen destination drive must support
DCO or AMA.
3.2. Configuring TD4
ISTD230100-UGD-EN-1
User Guide
21