Back to News

How to Scan a non OS Drive or Partition

Posted by Richard T. Frawley on May 28, 2019
Richard T. Frawley
Find me on:

When making decisions on scene it is critically important for an investigator to scan and analyze the Operating System Drive or Partition, or what is commonly referred to as the C:\ drive. ADF digital forensic software tools give investigators out-of-the-box Search Profiles designed to quickly scan and analyze OS partitions with targeted paths that would not be present on a non OS partition.

If you come across a non OS drive or partition, a storage partition, or external storage drive, instead of using the built-in Comprehensive Search Profiles, you can create a Custom Search Profile for non operating system drives using Digital Evidence Investigator®

Create a Search Profile for non OS drives

Create a Search Profile for this purpose by selecting "New Profile" from the function toolbar. If you want to collect Multimedia or Documents you can select file captures to achieve this goal. In the multimedia section select any of the file captures that are comprehensive as these captures search the entire file system regardless of paths.


With this new Search Profile you can also add a custom keyword list or hash list.  You can learn to create these file captures in our other videos.

Once your new Search Profile is complete it can be run from the Collection drive or on your forensic machine against any attached devices or forensic image files.

Watch Short How To Videos

Topics: Digital Evidence Investigator, High Tech Crime, Forensic Triage, Computer Forensic Lab, Forensic Analysis, Custom Search Profiles, Early Case Assessment, How To Video

Get Triage & Digital Forensic News (once a month)

Posts by Tag

See all

Recent Posts

CustomButton
  • READY TO ACCELERATE YOUR DIGITAL INVESTIGATIONS?