For questions generally relating to recovery of "plain" data from digital storage, when that storage has been damaged or the credentials securing it are lost.

learn more… | top users | synonyms

0
votes
0answers
31 views

forensic disk image of randomly disconnecting disk [migrated]

I'm currently aquiring a disk image for data recovery, however the disk is malfunctioning and is randomly disconnecting during the acquisition. I'm using the linux dd utility with conv=noerror,sync ...
0
votes
1answer
186 views

Does microwaving a CD erase it?

I just read the question: Does microwaving a hard drive erase it? and now I am curious too... does microwaving a CD (or for that matter, DVD, or blu-ray) erase it? My initial thought is that some ...
0
votes
4answers
114 views

How difficult is it to protect your storage from data recovery

Many of my customers refuse to sell or recycle their old hard drives or mobile phones because everybody now-days talks about how popular data recovery program's are. Isn't it enough to use a software ...
1
vote
1answer
33 views

Data Abstraction Layers in Forensic Imaging

I am a bit confused from various sources about the abstraction level and layers that a file resides in forensic imaging. I have found two slightly different explanations: The first one includes a) ...
0
votes
1answer
62 views

Storing data permanently vs temporarily

My lecturer said that since hard disk space is so cheap these days, most organisations do not delete the data on the disk. Rather, they only logically delete it (remove the link to the data). If this ...
8
votes
4answers
2k views

How does forensic software detect deleted files

How does forensic software detect deleted files? When a file is deleted, the pointer from MFT in NTFS system is deleted and the file is no longer accessible from the OS. If our disk is fragmented how ...
1
vote
1answer
65 views

Data recovery from file collections [closed]

I am presently working as a summer intern. My first objective is, given a collection of files, recover and identify the file types present in it. To download sample pseudo-forensics data I have been ...
6
votes
3answers
1k views

Is filling up the empty space in a disk with any data enough measure against file recovery

If I have an important data in a disk (flash, SSD or HDD) and I deleted them, I know it is easy to recover these deleted data (even by using free software like recuva. Now if I fill this disk with any ...
3
votes
1answer
482 views

How can I recover a GPG private key from a PC which has died? [closed]

Long story short - PC with kleopatra processor died, and I only have a backup of my public key. I've gone into the HDD and tried to re-jig kleopatra in the hope it would remember everything for me on ...
2
votes
3answers
135 views

Creating a custom restore disk to prevent data mining?

I work in commercial telecoms and one part of our business is the leasing of computer equipment to call centers. If the customer for whatever reason gives us the equipment back (non-payment, out of ...
0
votes
2answers
77 views

Secure system generated symmetric keys

I'm developing a system that manages and shares user passwords (which are encrypted using user generated symmetric keys). But of course a big concern is the user losing their symmetric key and the ...
1
vote
3answers
275 views

Environmentally friendly ways to destroy hard drives

The best method to prevent others from reading the data on hard drives is to destroy the drives physically: a sledgehammer is a cheap and effective tool to prevent the data from being read again. ...
6
votes
1answer
172 views

What's the best duration for storing e-mail? [closed]

We’ve all become so accustomed to using email in our daily personal and working lives that we really don’t give a whole lot of thought to it. It’s the fastest way to communicate with others in the ...
4
votes
6answers
4k views

Overwriting hard drive to securely delete a file?

I am working on a computer that I am not allowed to install new software on. It does not have secure delete software installed. Suppose I have a file (or files) that are sensitive that I'd like to ...
2
votes
2answers
268 views

Is there any way of recover a locked drive using TPM?

Just reading I learned about the TPM technology and how it works. However, it make me wonder... if the motherboard crashes, is the data lost forever? Because you can't use the drive in other system ...
0
votes
0answers
25 views

Secure delete with urandom? [duplicate]

What recovery techniques (if any) exist that can recover data from a mechanical HDD if the user has filled the disk with a single run of dd if=/dev/urandom of=/dev/[disk]? Or in other words: is this ...
3
votes
3answers
6k views

Can files deleted from a true crypt volume be recovered?

I have a True Crypt volume that's set as a file. When I mount the volume and delete a file within the container, windows asks if I'd like to send the file to the recycle bin. While the volume is ...
2
votes
1answer
8k views

Is there any way to crack bitlocker drive?

We have disk drive that encrypt with BitLocker . Is there any way to hack or crack and recover our data? my key is lost. AND we haven't any backup from those data!
8
votes
2answers
1k views

Is Data Remanence a Myth? [duplicate]

Possible Duplicate: Why is writing zeros (or random data) over a hard drive multiple times better than just doing it once? Multiple overwrites have often been discussed as a secure way of ...
7
votes
1answer
989 views

How isolated are files on a VirtualBox virtual machine from the host filesystem?

When transferring ownership of a computer from one party to another, it's advisable to perform steps to clean out personal data from the hard drive. Depending on needs, the type of data, and/or level ...
9
votes
1answer
578 views

Reversible, recoverable user data encryption scheme

From this earlier question, I have a general need to obfuscate a set of third-party credentials stored in a user account, which are then used in an internal Winforms software client. The scheme from ...
1
vote
1answer
537 views

Windows 7 EFS - connot decrypt

I have some files on my laptop that were accidentally encrypted, I think by Visual Studio. I didn't even know that was possible. Anyway, the way I discovered they were encrypted was that I changed ...
1
vote
1answer
96 views

GPG encryption date or GPG version recoverable?

Is there a way to determine the date of encryption or the GPG version of a GPG-encrypted file (with symmetric encryption)? I lost the password but some rough information about when the file was ...
1
vote
2answers
911 views

Wipe free space with zeros, how secure? [duplicate]

Possible Duplicate: How can I reliably erase all information on a hard drive? If I wipe free space with zeros instead of random data to finish fast will that write old file to be ...
2
votes
2answers
1k views

Use truecrypt to make data unrecoverable

If I format all my drivers c,d,e,f and then make a truecrypt volumes equal to drive size then delete it 'the voulme' will that make the old data unrecoverable ex. d:= 30g i use truecrypt to make 30g ...
1
vote
1answer
127 views

Data recovery for pulling out all data, and software to find types of content [closed]

I am looking to do data recovery on disk drives and memory cards. For this I want a device or type of software which allows me to pull out the following data: Allocated space Unallocated space Slack ...