Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 28 guests and 1 member online
 
Free Business and Tech Magazines and eBooks

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Forensicsarrow Fail Motherboard Raid Controller
EH-Net
May 26, 2013, 01:59:29 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Fail Motherboard Raid Controller  (Read 2264 times)
0 Members and 1 Guest are viewing this topic.
BACARDI_DWB
Newbie
*
Offline Offline

Posts: 13



View Profile
« on: November 13, 2012, 12:54:03 PM »

First of all I am sorry if this is in the wrong section.

I figured that this issue I am having would best be suited here. I know nothing about forensics but I am ready to learn. I have an issue and my wife is about to kill me if I can not fix the problem. I had my desktop setup where I had the OS running off of a SSD drive and then I had 3 400gb SATA hard drives in a Raid 5 configuration off of the mother board to support all of the pictures, movies, music and stuff. This worked well since the hard drives were cheap and I had one fail and replacing it was not an issue since it picked the RAID back up with out a problem.

Well my motherboard bit the dust and its an outdated Gygabyte motherboard (I do not know what exact model since I am on deployment 1/2 a world away) I was troubleshooting this right before I left for deployment with no love.

We have lots of pictures and stuff on those drives, I was unable to successfully mount them to any operating system without them requesting to be formatted first. I bought another motherboard with a raid controller but it wants to rebuild the raid from scratch and format the drives.

Is there any way for me to get the pictures off of those 3 hard drives? (pictures of my Son from birth to his 2 year birthday and many others)

Thanks for any advice and direction you can send me. I am wanting to do this myself and make it a learning experience to get into the forensic hard drive stuff, but I really don't know where to start.

Ryan L.
« Last Edit: November 13, 2012, 01:08:01 PM by BACARDI_DWB » Logged

-Ryan
A+ | Sec+
So much more to learn...
ajohnson
Recruiters
Hero Member
*
Offline Offline

Posts: 1060


aka dynamik


View Profile WWW
« Reply #1 on: November 13, 2012, 02:11:02 PM »

I love R-Studio for data recovery. I've personally never used this feature, but they claim to be able to create a virtual RAID array with valid drives and allow you to recover data that way: http://www.r-tt.com/Articles/RAID_Recovery_Presentation/
Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
m0wgli
Full Member
***
Offline Offline

Posts: 248


View Profile
« Reply #2 on: November 13, 2012, 02:28:14 PM »

If you can't find the same motherboard, try and identify which RAID controller the motherboard used. A different motherboard with the same controller may allow you to get your array back.
Logged

Security + | OSWP | eCPPT | CSTA
BACARDI_DWB
Newbie
*
Offline Offline

Posts: 13



View Profile
« Reply #3 on: November 13, 2012, 06:05:11 PM »

I have never seen R-Studio, that looks like it is going to be the trick.

I could not purchase the same motherboard but I did purchase one with the same raid controller and it would not recognize it.

Thanks guys, I knew I would find my answer in here

Ryan L.
Logged

-Ryan
A+ | Sec+
So much more to learn...
ajohnson
Recruiters
Hero Member
*
Offline Offline

Posts: 1060


aka dynamik


View Profile WWW
« Reply #4 on: November 13, 2012, 06:12:29 PM »

Did you configure the RAID BIOS in the same manner as original system? It should have recognized the array.
Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
BACARDI_DWB
Newbie
*
Offline Offline

Posts: 13



View Profile
« Reply #5 on: November 13, 2012, 06:43:34 PM »

Yes, everything was configured the same, the only thing that was might have been off is the order of the hard drives. Being 9 different combinations of which one connects to what might have been the limiting factor and the time crunch I was under before deploying.

After I get this fixed I am going back to a raid 0 and doing offsite backups instead.

Ryan L.
Logged

-Ryan
A+ | Sec+
So much more to learn...
3xban
Hero Member
*****
Offline Offline

Posts: 608


View Profile WWW
« Reply #6 on: November 13, 2012, 09:16:13 PM »

Even with RAID 5, you should always be doing backups.  If you don't have 2 or more copies of a file, it isn't backed up Cheesy  Live and learn.  Good luck with the R-Studio, let us know how it pans out!
Logged

Certs: GCWN
(@)Dewser
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.059 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.