DriveMap

Visualize hard drive data

DriveMap

DriveMap enables you to examine the data entropy of a hard drive across all its sectors. A simple mouse movement triggers the program to reveal the content of the current sector in a nearby window. You can also view a downscaled representation of your entire drive as a 400 by 400 pixel miniature bitmap. This allows you to swiftly grasp drive characteristics that would typically require much more time to discern through alternative methods, such as using DiskExplorer or RAID Reconstructor.

Price: Free

Version: V0.11 BETA, January 24, 2024

Updates: Free lifetime updates for licensed users

System Requirements: 4 GB RAM, Windows 95, 98, ME, 2000, XP, Vista, 7, 8, 10, 11, Server 2008-2022, 32 or 64 bit

Highlights

  • Entropy Analysis: DriveMap provides the capability to assess the entropy of a hard drive's data. Entropy is a measure of data randomness, and analyzing it can reveal information about data compression, encryption, or patterns within the drive.

  • Sector Content Display: With a simple mouse movement, the program allows users to quickly view the content of the current sector in an adjacent window. This feature is useful for inspecting the data within individual hard drive sectors.

  • Drive Overview: DriveMap offers a unique visual representation of the entire hard drive. It presents the drive as a downscaled 400 by 400-pixel miniature bitmap, providing a visual summary of its content and characteristics.

  • Variable Input Media: DriveMap can accept various input media types, including hard drives, USB drives of all types, and image files.

  • DriveMap Is Free!

  • Efficiency: The tool streamlines the gathering of insights about the hard drive. It offers a quicker and more efficient way to understand drive characteristics compared to alternative methods, such as using DiskExplorer or RAID Reconstructor.

  • Rapid Information Retrieval: DriveMap enables users to swiftly access crucial information about the hard drive's data without requiring extensive manual analysis, making it a valuable tool for data forensics, troubleshooting, or general drive inspection.

  • A User-Friendly Interface simplifies the process of navigating and interacting with the hard drive's data, making it accessible to both novice and experienced users.

  • Other Characteristics: In addition to analyzing the entropy of drive data, DriveMap can present various other characteristics. These include entropy variations, data types, mean values, and standard deviations. When examining a specific sequence of sectors, the software can perform Fast Fourier Transformations to identify concealed periodic patterns.

Find Your RAID's Periodicity

Determining the parameters within a RAID configuration involves analyzing the entropy patterns found in each of the individual member drives.

DriveMap

DriveMap: Drive with the entropy pattern of a 3-drive RAID-5 with a block size of 16. 

In this image, DriveMap reveals a characteristic pattern representative of a RAID-5 configuration. By measuring the width of the bars within the display, you can observe that the higher-entropy red bars span 16 sectors, while the lower-entropy gaps cover 32 sectors. This particular drive is a member of a 3-drive RAID-5 setup with a block size of 16 sectors, resulting in a complete period spanning 48 sectors.

This pattern arises due to the way RAID parity blocks are calculated, involving XOR operations on data from the other drives. XOR-ed data typically exhibits higher entropy than the original data, which is why you see the parity blocks depicted in red approaching a near-maximal entropy value of 1, while other areas display significantly lower entropy, averaging around 0.5.

The measurement of data entropy used here is based on "Shannon Entropy," which provides an indication of the average level of "information," "surprise," or "uncertainty" inherent in the data under consideration. For a more in-depth understanding of this concept, you can explore its theory at https://en.wikipedia.org/wiki/Entropy_(information_theory).

Look at the Entire Drive Data As a Miniature Bitmap

DriveMap

DriveMap: Miniature showing the entropy across the entire drive. 

DriveMap lets you create miniature drive bitmap representations that depict the drive's entropy characteristics. In the context of a 400 by 400-pixel bitmap, the tool examines and calculates entropy for 160,000 evenly spaced sectors. This approach provides a straightforward means of visualizing the drive's utilization and identifying the presence of high-entropy data, such as compressed files and images. Additionally, comparing miniature bitmaps from different drives makes it possible to discern relationships between them, such as potential similarities (e.g., RAID-0) or identical content (e.g., RAID-1).

In this image, we have created a miniature bitmap of the drive. You see the drive is about 50% filled with mixed data, followed by 10% high-entropy data. The last 40% are unused.

© 2024 Runtime Software