Physical data recovery

ivybat

New Member
Oct 26, 2006
6
0
#1
Hello! So I'm writing a research paper on computer forensics and i'm focusing mainly on data recovery. I'm a student.

I was wondering what kind of tools and/or procedures one might use in trying to recover data on a physically corrupted drive (i.e. shocked, thrown in water, cracked disc)

I'm very familiar with computer hardware but not so much with forensic terminology.

Thanks in advance!
 

ivybat

New Member
Oct 26, 2006
6
0
#2
also, any books that you might recommend on the topic of computer forensics would be very helpful! (i have with me right now "Computer Investigation" by Bauchner (not my favorite) and Computer Forensics: Computer Crime Scene Investigation by Vacca.



thanks again
 

Prickaerts

Administrator
Jan 2, 2006
765
0
#3
Hi Ivybat,

You might want to take a look at Forensic Discovery by Wietze Venema and Dan Farmer (unix forensics) and File System forensics by Brian Carrrier.

For data recovery on physicalla damaged disks you will need hardware tools like microscopes etc, . Regular forensic tools such as Encase and FTK will not help you out.

Cheers,

Chris
 

About us

  • Our community began in 2004. Since this time, we have grown to have over 29,000+ members within the DFIR & Cyber Security community.

    We are happy to announce that this forum is now under new ownership with the goal to once again become the main Digital Forensics Forum on the internet for DFIR, OSINT and Cyber Security.

    If you can think of ways to help us improve, please let us know.

    We pride ourselves on offering unbiased, critical discussion among people of all different backgrounds.

    We are working every day to make sure our community is one of the best.

Quick Navigation

User Menu