BlackBerry Limited
Methods and systems for detecting hidden sectors in a hard drive

Abstract:

Methods and systems for detecting hidden sectors in a hard drive. The method may include initiating a linear copy of the hard drive and, while the hard drive is being copied, capturing images of a platter and an actuator arm within the hard drive using an imaging device. The captured images are output and they indicate a range of movement of the actuator arm across the platter during the linear copy. Ranges of movement that fail to scan across the full expected size of the platter may be indicative of a modified partition record that maliciously hides a portion of the hard drive from the copy operation.