Abstract: A computer program product embodied in a memory (FD1, FD2) implements procedures for replicating the contents of a first hard disk on a second hard disk. In a backup operation mode, the program enables a suspect computer (20S) to copy or backup sectors of its hard disk (22S) onto a temporary storage media (84) without recording on hard disk (22S). A user-designated signature, dimensioning parameters of hard disk (22S) and first checking information is also recorded on the temporary storage media (84, FD3). In a restore operation mode, the program enables a lab computer (20L) to read sectors of the hard disk (22S) from the temporary storage media (84) and to record sectors of first hard disk (22S) on the hard disk (22L) in accordance with the dimensioning parameters of hard disk (22S).

Abstract: The data storage and protection apparatus maintains an index of all data file activity on a computer system and stores copies of data files in a manner to enable a user to recreate the state of the computer system at any selected point in time. A data file monitor intercepts all communication between application programs and the file system to obtain data file status and activity information. This information is used to identify data files which are transmitted to a data file backup media for storage along with directory information that identifies the stored files to enable the system to later locate and retrieve data files that were stored on the backup media.