|
Hidden Areas - HPA/DCO |
|
|
The Host Protected Area (HPA) and Device Configuration Overlay (DCO) are hard disk features for hiding sectors of a hard disk from being accessible to the end user. A typical usage for an HPA is to store boot sector code or diagnostic utilities of the manufacturer. However, it is also know that the HPA can be used for malicious intent including hiding illegal data of interest to forensics investigators. The DCO feature was proposed to allow system vendors to purchase hard disks of different sizes, but setting the hard disk capacity of each disk to the same size. Again, this allows for hiding of data within the hidden sectors. DiskCheckup allows the user to detect the presence and set the new size of HPA/DCO hidden areas.
Modify HPA/DCO Max User LBA Max Native LBA Max Disk LBA HPA Size DCO Size Depending on the hard disk, the HPA/DCO areas may be locked and therefore cannot be changed. This is indicated by "N/A" for the appropriate fields. Note: You will need to detach/re-attach the hard disk (or reboot) after your changes to allow the system to retrieve the new capacity of the disk. |