Please use this topic for discussion of the webinar

Forensic Data Recovery with ReclaiMe Pro

Presented by Elena Pakhomova, co-founder of ReclaiMe Data Recovery.
_________________
Jamie Morris
Forensic Focus
Web: www.forensicfocus.com
Twitter: twitter.com/ForensicFocus
Facebook: www.facebook.com/forensicfocus 

I am not sure why it is Forensic recovery rather than just recovery software.

I know I call my software 'forensic recovery', but this does include comprehensive logs of dates, files sizes, attributes, as well which sectors from the hard drive were used to make up the file. Thus fragmented files could be reconstructed from the log information. Files should also be hashed if you want the forensic label

Unless I am missing something, logs appear to be missing from the program along with 'F1' Help. The export function just handles names and dates in a non standard .CSV file.
_________________
Michael Cotgrove
www.cnwrecovery.com
www.goprorecovery.co.uk 

- mscotgrove

I am not sure why it is Forensic recovery rather than just recovery software.

I believe it's just a general practice of introducing a new product to an adjoining audience. I skimmed through the transcript and it's indeed more about data recovery.  

In answer to this point, and in all fairness to ReclaiMe, I added the word 'forensic' to the webinar title myself when uploading it to our YouTube channel (primarily in an attempt to clarify the intended audience). Any criticism - and I understand the point being made - should be aimed at me!

Jamie
_________________
Jamie Morris
Forensic Focus
Web: www.forensicfocus.com
Twitter: twitter.com/ForensicFocus
Facebook: www.facebook.com/forensicfocus 

- jamie

Any criticism - and I understand the point being made - should be aimed at me!

Good.
You could have added to it somewhere "cyber", something like:
Forensic Data Recovery with ReclaiMe Pro for cyberprofessionals
or
CyberForensics: Data Recovery with ReclaiMe Pro

would have sounded more trendy , utterly wrong , but more "modern".

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 

Hello,

While I admit that data recovery and computer forensic are different fields, they are still closely related to each other. Computer forensics software in general are designed to retrieve and analyze data from healthy, or slightly damaged filesystems. On the contrary, data recovery software like ReclaiMe Pro aims to extract all the data possible even from severely damaged filesystems, including after whatever deletion attempts might have been made. While success rate varies, data recovery software would typically produce more results when more effort was spent to get rid of the data.

More than that, many already widely used filesystems, like ReFS or BTRFS, are still not supported by forensic tools, not to mention RAID/NAS reconstruction. Therefore, data extraction in such cases is possible only with more data recovery than forensic software.  

- ReclaiMe

Computer forensics software in general are designed to retrieve and analyze data from healthy, or slightly damaged filesystems. On the contrary, data recovery software like ReclaiMe Pro aims to extract all the data possible even from severely damaged filesystems, including after whatever deletion attempts might have been made. While success rate varies, data recovery software would typically produce more results when more effort was spent to get rid of the data.

With due respect, your contrast between forensic vs data recovery software misses the point. The features Mr. Cotgrove describes refer to the necessity in forensics that results meet a legal standard of reliability. That reliability is bolstered by the process being logged, and the results repeatable and verifiable. Irrespective of whether the subject file system is slightly or severely damaged, forensic software should produce sufficient metadata for an examiner to reconstruct the results even if using a different tool. Ultimately, it is the expert's opinion that counts, not the tool.

Please understand that none of this is intended to diminish the value of ReclaiMe, but in forensics, we don't like black boxes.
_________________
Scott Tucker
Aptegra Consulting, LLC
www.aptegra.com