This is a project for ITT, I won't do this myself,but the question was was how does the fbi recover erased data off of a hard drive? any site referalls would be helpful thanks.
2006-09-18 05:02:34 · 7 answers · asked by jt 4 in Computers & Internet ➔ Hardware ➔ Other - Hardware
Erased data is recovered by many methods. From failing drives, special software, tools, and methods are necessary, and sometimes a clean room environment is required. The FBI however, for their purposes, use a forensic approach. There is software available called Encase or FTK for their applications. Erased data in its simplest form is data on a medium that has lost its allocation. For instance, when you delete a file in windows, it marks the space that holds the data as unallocated. The data can be recovered by making a "forensically sound" copy and analyzing the data sector by sector, or with some of the automated tools above. Hope you ace your project!
2006-09-18 05:24:55 · answer #1 · answered by gadatarecovery 2 · 0⤊ 1⤋
Many times a computer is not actually wiped clean, it's just the file allocation table which has been deleted. The FBI and other agencies can go in sector by sector and recover data and put it together to find the informatoin they seek.
The only way to truly destroy a computer's hard drive (other than drilling a hole in the plates) is to wipe each sector. Programs exist which do this. The best are those which conform to Department of Defence Standards.
2006-09-18 05:11:47 · answer #2 · answered by Marvinator 7 · 0⤊ 0⤋
to fullyyt erase a demanding stress, you would possibly want to wish to end what's termed a low-aspect format. To make information restoration confusing if not close to to not achieveable, you want to observe software on the ingredient of yet another that makes distinctive passes over the stress writes zeros to each and every and each and every sector. there is distinctive software which will try this for you, yet as a precaution, it continues to be suggested to observe software it really is designed by employing producer to attempt this. it fairly is because not all drives keep information interior an same way and by employing operating a particular gadget might want to wish to render the stress ineffective. also as a ingredient word, the acceptable Boot CD has many use finished utilities and is composed of Low-aspect formatting.
2016-11-27 22:01:38 · answer #3 · answered by ? 4 · 0⤊ 0⤋
Usually, "erasure" is nothing more than a removal of the TOF (Table of Files) and all the data is still present if nothing has been written over it. There are inexpensive data-recovery softwares for this.
If some overwrite has occurred, you need to go to a data-recovery firm. There is one in Atlanta with a good internatl rep that charges $300/hr if they recover anything. If not, no charge.
2006-09-18 05:15:14 · answer #4 · answered by Anonymous · 0⤊ 0⤋
Deleted data isn't "erased" - only its location is deleted so that space can be reused. Data can be retrieved even after reformatting the drive until new data is written over the old.
http://www.ugr.com/nl0504.html
2006-09-18 05:21:01 · answer #5 · answered by myste 4 · 0⤊ 0⤋
Hi!
I learned about this site on elephantboycomputers.com
Apparently they can recover almost anything (for a fee of course) from a mistreated or erased hard drive.
http://www.drivesavers.com/
I personally never got to use them and hope I never will!!!
Hope this helps!
2006-09-18 05:10:50 · answer #6 · answered by marie J 6 · 0⤊ 0⤋
If you deleted the partition, I don't think U can.
There might be some kind of software to recover it if it was only formatted.
2006-09-18 05:10:01 · answer #7 · answered by Dang Girl 2 · 0⤊ 0⤋