Return to the Manual Index

Getting Started


Running ByteBack Data Recovery Investigative SuiteTM


Boot your PC from the ByteBack D.R.I.S.TM Bootdisk. Make sure that 'FLOPPY' is set to be the first boot device in your PC's BIOS.

At the command prompt (A:\), type BB4 and press [enter]


Running ByteBack D.R.I.S.TM for the first time


Demo:

When you run ByteBack D.R.I.S.TM for the first time, you will be prompted to enter a License Key. If you do not enter a serial number, ByteBack D.R.I.S.TM will run in demo mode: all features are accessible, however nothing is written to your hard disk; no repairs can be made.

Entering the license key

Definitive Key:

Your Definitive key (or Personal key) will be emailed to you within 24 hours after the purchase (usually the same day). Once you have received the definitive key and entered it, you will no longer be prompted to enter a key when starting ByteBack D.R.I.S.TM.

For more details, please check the registration page.


Starting ByteBack D.R.I.S.TM in Forensic Mode 

Click here for background information and for a complete procedure for forensic evidence acquisition.

Normally ByteBack D.R.I.S.TM uses an administrative sector on each hard disk that is detected. While this is completely safe, it is vital that forensic software does not alter the contents of the source disk in any way. To ensure this, ByteBack D.R.I.S.TM will not create an administrative sector on any of the disks attached to the system when it is run in Forensic mode. As a result of this, certain features that depend on the administrative sector will not be available (for example, saving state files - see the chapter that covers disk and state file selection). If you need to clone a disk for forensic purposes you should always select 'Forensic mode'!

To run ByteBack D.R.I.S.TM in forensic mode, start the program from the command line using the /for switch: BB4 /for [enter]

If you select Forensic mode, ByteBack D.R.I.S.TM asks the user to select a disk that should be protected. The user must select a disk, or else exit the program. The protected disk can not be altered during ByteBack D.R.I.S.TM operations, thus making sure the disk's contents remain untouched. The protected disk is also safe from accidentally selecting it as the target disk for a clone or wipe operation.

http://www.toolsthatwork.com