Manually recovering files from formatted disk....

Manually recovering files from formatted disk....

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Manually recovering files from formatted disk.... bensmyth 12-16-2004
Posted by bensmyth on December 16, 2004, 6:51 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi,

I'm interested in computer forensics; I know there are tools out there to
handle data recovery automatically.... However, this doesn't really teach me
anything!

I understand (albeit, not in great detail) what happens when you delete
files, format/partition drives, etc. But how do I go about manually
recovering data (/repairing the drive)??

What low level tools should I be using??
I assume a Hex editor? Which one??

How do I go about repairing the damage partition table, file information,
..... ??

And help would be great!!


Cheers,

Ben





Posted by Walter Roberson on December 16, 2004, 7:37 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
:I'm interested in computer forensics; I know there are tools out there to
:handle data recovery automatically.... However, this doesn't really teach me
:anything!

:I understand (albeit, not in great detail) what happens when you delete
:files, format/partition drives, etc. But how do I go about manually
:recovering data (/repairing the drive)??

Is this a general question about all the tools available, or would
you care to narrow it down to a specific family of operating system
versions?

For example, the hex edit tool I had that allowed me to
issue direct commands to the disk controller is not likely
going to be of overly much interest to you, considering that
it ran under CP/M and was suitable only for directly accessing
Winchester controllers that used the ST506 interface. That was
20 years ago.
--
Usenet is one of those "Good News/Bad News" comedy routines.


Similar ThreadsPosted
Recovering files February 16, 2005, 12:39 am
Formatted my drive, still spyware/virus, how is it possible? April 27, 2005, 12:25 pm
more on disk searching April 21, 2006, 9:28 pm
searching a hard disk April 8, 2006, 10:16 pm
Best way to encrypt an external disk April 11, 2006, 3:53 pm
Full Disk Encryption Survey July 9, 2007, 1:56 am
Disk Encryption with TrueCrypt and Backups December 28, 2008, 3:38 am
Recommendations for hard disk encryption tool? July 26, 2006, 9:08 am
So why don't we use full disk encryption on all mobile devices? October 12, 2006, 10:56 pm
U.S. Gov't to use Full Disk Encryption on All Computers December 29, 2006, 5:35 pm

The site map in XML format XML site map

Contact Us | Privacy Policy