Rebooting in Write-Block Mode
To reboot the computer system in write-block mode, place the SurfRecon Elite CD-rom in the computer's CD-Rom/DVD-Rom tray, insert the SurfRecon thumb drive into an open USB port, and restart the system. If the system does not reboot into a SurfRecon OS, it may be necessary to enter the computer system's Bios and change the boot order of the computer.
Once the computer has properly rebooted in write-block mode, SurfRecon should launch automatically. If the application does not launch, make sure the thumb drive is inserted correctly, find the SurfRecon folder, and click on the SurfRecon_Linux executable. This will launch the application and you will be able to scan the system for images without compromising any evidence existent in the system.
Topics: elite cd, reboot, reboot cd, write block, write protected, protected mode, forensic