±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35868
New Yesterday: 0 Visitors: 140

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 891 matches

Re: Hashing NTFS Resident File Data

Post Posted: May 23, 19 10:08

Be very careful about a Copy and paste into something like notepad. It can sometimes modify line endings, eg a CR to CRLF. The change may not be visible when viewing but the hash will be different.
...
mscotgrove
Topic: Hashing NTFS Resident File Data
Replies: 6
Views: 2045
 

Re: Format WD External Hard Drive

Post Posted: Mar 17, 19 04:21

NEVER change anything on the original disk

If you want to format a disk, make a sector by sector copy first, or equivalent image file, eg DD,or E01
mscotgrove
Topic: Format WD External Hard Drive
Replies: 7
Views: 1400
 

Re: Data recovery 101 Question on XFS partition

Post Posted: Mar 17, 19 04:01

In theory, it is not possible to recover deleted XFS

With my cnwrecovery.com I have had some success. The program does make guesses as to what an iNode points to, so sometimes works, and sometimes ...
mscotgrove
Topic: Data recovery 101 Question on XFS partition
Replies: 7
Views: 2210
 

Re: Custom Linux imaging Tool

Post Posted: Nov 16, 18 11:41

Imaging normally refers to taking a copy of the raw hard drive (or other media). Imaging is typically only concerned with sectors and not the contents, or file system.

You appear to want a selec ...
mscotgrove
Topic: Custom Linux Coping Tool
Replies: 3
Views: 1445
 

Re: 15 years of data gone? [48TB]

Post Posted: Aug 28, 18 14:29

The disks are NTFS, are they a single partition.

If so finding the $MFT should be straight forward data recovery.

You mention JBOD - were you using this feature, or is it just standalone 12TB d ...
mscotgrove
Topic: 15 years of data gone? [48TB]
Replies: 8
Views: 2834
 

Re: 15 years of data gone? [48TB]

Post Posted: Aug 28, 18 12:23

The disks are NTFS, are they a single partition.

If so finding the $MFT should be straight forward data recovery.

You mention JBOD - were you using this feature, or is it just standalone 12TB d ...
mscotgrove
Topic: 15 years of data gone? [48TB]
Replies: 8
Views: 2834
 

Re: 15 years of data gone? [48TB]

Post Posted: Aug 28, 18 12:02

The disks are NTFS, are they a single partition.

If so finding the $MFT should be straight forward data recovery.

You mention JBOD - were you using this feature, or is it just standalone 12TB d ...
mscotgrove
Topic: 15 years of data gone? [48TB]
Replies: 8
Views: 2834
 
Page 1 of 128
Page 1, 2, 3 ... 126, 127, 128  Next