Call us: 10am – 6pm ET

+1 888 540-2010
+1 416 833-3501

Call us: 10am – 6pm ET

+1 888 540-2010
+1 416 833-3501

Clip target drive to source evidence size

When you image data from an evidence drive, but the target drive is larger than that of the source, the hash values for the source and for the target drives will not be identical. This will happen even if there is no data in the remaining space of the target.

To avoid it, you can limit your SATA target drive's capacity using Host Protected Area (HPA) or Accessible Max Address (AMA). It will make the sectors beyond this limit inaccessible to the hashing tools or the end user. In TaskForce, it only takes one quick adjustment to the imaging settings:

  1. Click Image in the left-side task menu and select the source and the target
  2. In the Settings page click Change button.
  3. In Miscellaneous tab activate the Limit target disk size to source size using HPA/AMA (SATA target ports only) option.

Enabling HPA/AMA restriction for target

Enabling HPA/AMA restriction for target

You can now proceed with the Imaging process by clicking Start button.

Before the imaging starts, TaskForce looks up the size of the evidence drive and limits the space of the target using HPA/AMA to make its capacity identical to that of the evidence drive.

When Imaging is complete, the report will contain information about the time when HPA/AMA was enabled.

Imaging report indicates the change to the target drive capacity

Imaging report indicates the change to the target drive capacity

The target disk's port in Devices menu now contains an HPA/AMA indicator, thus informing you that HPA/AMA has been enabled on this drive.

HPA indicator in the port of the Device menu

HPA indicator in the port of the Device menu

There will also be a report created in the case management system, which indicates the old (native) and the new (as set by HPA/AMA) max address.

Report about HPA activation

Report about HPA activation

Now you can calculate hash on both drives to make sure the hash values are identical.

NB Enabling HPA/AMA is an option available only for SATA target drives.

To learn how to unclip HPA/AMA, read Unclip or change HPA, DCO, AMA limitations in our manual.