4.2 Preconditions checking
Before starting duplications and other jobs, TX1 automatically checks for
preconditions. Some preconditions produce warnings, and you can choose to
continue or cancel after viewing each one. Some preconditions are fatal and require
that the duplication process be aborted.
4.3 Duplicating
TX1 will duplicate one source drive to up to four destination drives simultaneously
per job. Up to two jobs can be active at any given time. For a given source/job, the
destination drives can be a mix of directly connected drives and network shares. The
destinations can be a mix of cloned and imaged copies.
Note: This section is focused on whole disk duplication operations. Please refer
to “Logical imaging” on page 117 for details on that alternative acquisition
method. See “Mobile backup acquisition” on page 152 for information specific
to that type of job.
4.3.1 Cloning
A clone, also known as a disk-to-disk duplication, makes an exact copy of the source
drive to the destination drive(s).
If a destination drive is not blank, TX1 displays a yellow warning to indicate that a
clone will overwrite the contents of the destination drive. This reduces the risk of
overwriting valuable data.
There is no need to format the destination media, as the clone will apply the file
system of the source media (if one exists) to the destination media automatically. It
is, however, a best practice to wipe destination media before duplicating to it as this
can help to identify potentially defective media and bad sectors, and it can reduce
the risk of cross-contaminating a duplication with stale data.
Note that, at the beginning of a clone job, TX1 prepares the destination drive by
wiping sectors 0, 1, and end-of-drive minus 1. This ensures there is no stale partition
table data on the drive, which reduces the possibility of drive detection issues at the
end of the job.
Note: Because partition table information is relative to the sector size of the
source drive, cloning to a destination drive with a different sector size is not
allowed. TX1 will detect this sector size mismatch issue and warn the user.
This condition will need to be rectified before the clone job can be started.
Chapter 4 Using TX1
76
OpenText™ Tableau™ Forensic TX1 Imager
ISTX240300-UGD-EN-1
To Next Page
Loading...