±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35896
New Yesterday: 1 Visitors: 180

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 894 matches

Re: Recover files from USB RAW partition

Post Posted: Aug 26, 19 07:13

Where did the SD card come from - was it a camera / video camera?
mscotgrove
Topic: Recover files from USB RAW partition
Replies: 13
Views: 1110
 

Re: Recover files from USB RAW partition

Post Posted: Aug 25, 19 11:54

Have you looked at the chip with a hex sector viewer. Do you see data, or is it all zeros?

If there are files, data carving tools should see something
mscotgrove
Topic: Recover files from USB RAW partition
Replies: 13
Views: 1110
 

Re: Recover files from USB RAW partition

Post Posted: Aug 24, 19 17:29

I would start with data carving.

If data carving finds file starts it gives hope there is something to be found and that the chip can still be read. If the chip has failed, or is encrypted, then c ...
mscotgrove
Topic: Recover files from USB RAW partition
Replies: 13
Views: 1110
 

Re: Hashing NTFS Resident File Data

Post Posted: May 23, 19 10:08

Be very careful about a Copy and paste into something like notepad. It can sometimes modify line endings, eg a CR to CRLF. The change may not be visible when viewing but the hash will be different.
...
mscotgrove
Topic: Hashing NTFS Resident File Data
Replies: 6
Views: 2078
 

Re: Format WD External Hard Drive

Post Posted: Mar 17, 19 04:21

NEVER change anything on the original disk

If you want to format a disk, make a sector by sector copy first, or equivalent image file, eg DD,or E01
mscotgrove
Topic: Format WD External Hard Drive
Replies: 7
Views: 1422
 

Re: Data recovery 101 Question on XFS partition

Post Posted: Mar 17, 19 04:01

In theory, it is not possible to recover deleted XFS

With my cnwrecovery.com I have had some success. The program does make guesses as to what an iNode points to, so sometimes works, and sometimes ...
mscotgrove
Topic: Data recovery 101 Question on XFS partition
Replies: 7
Views: 2267
 

Re: Custom Linux imaging Tool

Post Posted: Nov 16, 18 11:41

Imaging normally refers to taking a copy of the raw hard drive (or other media). Imaging is typically only concerned with sectors and not the contents, or file system.

You appear to want a selec ...
mscotgrove
Topic: Custom Linux Coping Tool
Replies: 3
Views: 1459
 
Page 1 of 128
Page 1, 2, 3 ... 126, 127, 128  Next