Technology Pathways, LLC releases ProDiscover(tm) DFT version 1.5 adding the ability to image a disks Hardware Protected Area from within Windows
Coronado, CA -- November 22, 2002 -- Today Technology Pathways released the latest version of ProDiscover(tm) DFT. Version 1.5 adds among other features the ability for computer forensics examiners to image a computer disks Hardware Protected Area" from within their windows based disk imaging tool. The Hardware Protected Area outlined in recent ATA Disk Specifications was originally designed for computer manufactures to hide diagnostics tools on a disk to aid in customer support. Recently tools have been marketed to consumers allowing users to hide data within the Hardware Protected Area. While no evidence has been seen that Hackers are using the Hardware Protected Area yet... information suggests black-hats are actively researching use of the HPA for malicious purposes.
ProDiscover(tm) DFT was the first Windows based computer forensics suite to be offered as open source and now the first to offer comprehensive Hardware Protected Area imaging support from within the Windows environment.
Checking for the existence of a Hardware Protected Area should become standard during disk imaging for computer forensics. Investigators who are not checking for the HPA could be missing critical evidence." says Christopher L. T. Brown Technology Pathways CEO. ProDiscover(tm) DFT has always included support for HPA detection however the latest version makes finding data within the HPA automatic. ProDiscover(tm) DFT is the lowest cost windows based computer forensics suite on the market. Features include the ability to collect, analyze, report on and manage computer disk evidence all in an intuitive windows interface.
Mark Edmead, an information security consultant with MTE Software recently stated: The HPA is an ideal place not only to hide sensitive information, but could be used to store illegal content as well. This new feature of ProDiscover will allow forensic investigation to explore this reserved hard disk space. This is a wonderful feature to an already powerful program."
|