DATA RECOVERY

Readers,

We would like to introduce our newest issue of eForensics Computer.

Now you hold in your hands special edition about Data Recovery. As you probably know, the topic is very complicated, various and … secret! Yes, yes! Companies and individual experts don’t want to disclosure their recovery tools and techniques or moreover trade secrets of their clients. I tried to gather in this issue basics of data recovery for beginners who just start to delve into the area with advanced analysis of recovering processes and tools for professionals.

Check what you can find inside:

DATA RECOVERY – FORENSICS STYLE

by Donna Eno, CCNA

So there you are…running your business or maybe you’re at home catching up on emails etc. Minding your own business. Then you notice files are missing, your screen flashes, your network connection slows to a crawl. You begin to wonder. You remember the conversation, just the other day with an IT friend over lunch about how more and more networks and the computers that sustain those networks are being compromised. You remember that conversation and some of the symptoms that a network and/or computer would display at the onset of a network attack. It bears a real resemblance to what you are experiencing sitting at your computer desktop. You get that sinking feeling in your gut as you wonder if it has happened to you and what it will take to minimize the damage….

FORENSICS AND HARD DRIVE DATA IMAGING & RECOVERY. THE PERILS AND PITFALLS OF WORKING WITH DEFECTIVE HARD DRIVES

by Jonathan R. Yaeger

This article will discuss some of the details of hard drive operation and failure, as related to digital data recovery or forensics. This will help the investigator to minimize compromises in evidence integrity. The article will also serve as an introduction to best practices when data recovery is required.

HOW TO USE MIRROR DRIVE FOR BACKUP WITH ZERO-TIME RECOVERY!

by Dr. Wei Deng

With Mirror Drive technology, you can recover and replace a failed device with close to zero down time. The state-of-the-art technology first converts and compares all files, then clone only the changed data to the hard drive, providing you with a high-grade-speed to complete the Mirror Drive process.

DATA RECOVERY INTRODUCE AND HOW TO RESCUE DATA

By Tommy Redden

A helpful and fast method for recovering data in a file system. This method includes the steps of performing a given way that scans the deleted and lost data files on a computer, and preview the recovered data before you decide to recover it back with professional data recovery software. To prevent the loss of data files, what tips you need to follow, and other knowledge of data recovery in details.

IF YOU ARE STUPID AND YOU KNOW IT… RAID 5 VMFS RECOVERY

by iCube Development

Basic hard drive data recovery is difficult, but a damaged RAID 5 Array containing VMWare ESX Virtual images, require an expertly trained technician and lab to properly perform a recovery without causing further damage to a client’s data. We will review the process to perform a recovery as well as steps to help prevent such a recovery in the future.

GREP AND REGEX, THE OVERLOOKED FORENSIC TOOLS

by Dr Craig S Wright GSE GSM LLM MStat

This article takes the reader through the process of learning to use GREP and Regular Expressions (RegEx). GREP May not seem to be a tool that relates to the process of data recovery, but we will show that this is an essential tool in recovering data. If you cannot find data, how can you recover it?

Using the GREP command we can search through a variety of information sources. For the forensic analyst, incident handler or system administrator, this means a simplified method of searching for information. Coupled with the use of regular expressions grep is a powerful tool for the IT investigator. In this paper, we look at some uses of grep and regular expressions.

RAID 5 DATA RECOVERY – A GUIDE FOR THE RAID OWNER

by Wayne Horner

Your business stores data in a RAID 5 storage array and you just found out that the RAID has failed. Many RAIDs get damaged by the repair attempts. Your job is to keep an eye on well meaning IT consultants and in-a-hurry tech support centers. To do that you need to know whats going on. The purpose of this guide is to arm you with enough knowledge to keep your RAID from being destroyed.

INTERVIEW WITH BRIAN GILL, CEO AT GILLWARE INC.

by Kishore P.V. and Richard C. Leitz Jr.