CRU Ditto Forensic FieldStation User Manual

Page 20

Protecting Your Digital Assets

Ditto Forensic FieldStation User Manual

5.5.2 ZIP, TAR, and LIST Settings

Click on the

ZIP

TAR

, or

LIST tabs

to configure the settings for each of those logical image types.

•

Log File Access/Modify/Change Times:

Check this box to log the access, modify, and change

timestamps of files and directories during the logical image action. This setting is format-dependent.

5.6 ERASE

The Ditto Forensic FieldStation allows you to view and customize settings for how the Ditto Forensic FieldSta-
tion erases disks.

5.6.1 Available Erase Modes

ERASE MODE

EXPLANATION

Clear Partition Table

Removes the partition table on the disk

Quick Erase

Performs a single pass writing all zeroes

Custom Erase

Performs 1-99 passes, overwriting the disk with zeroes or a user-selected

pattern

Secure Erase Normal

Initiates the disk’s built-in Secure Erase Normal function

Secure Erase Enhanced

Initiates the disk’s built-in Secure Erase Enhanced function

DOD Clear

Performs the U.S. Department of Defense “Clear” standard

DOD Sanitize

Performs the U.S. Department of Defense “Sanitize” standard

NIST800-88 Clear

Performs the “Clear” standard defined by NIST special publication 800-88

NIST800-88 Purge

Performs the “Purge” standard defined by NIST special publication 800-88

5.6.2 Customizable Settings

Some Erase Modes require several of the following settings to be configured a certain way as part of their
standard. In these cases, the settings cannot be modified.

•

Mode Name:

The name of the erase mode.

•

HPA/DCO Handling:

Sets how erase actions using the specified erase mode should handle HPAs

and DCOs. It can indicate in the log that there is an HPA (host protected area) or DCO (device config-

Figure 20.

The “Erase” tab on the “Configure” screen, showing

all available erase modes and their customizable settings.