±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 4 Overall: 36595
New Yesterday: 5 Visitors: 124

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

How to determine what happened to the hard drive?

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

robin1234
Newbie
 

How to determine what happened to the hard drive?

Post Posted: Jan 20, 20 00:43

Hi, everyone!

I made an image of a External Hard drive using FTK Imager. The image is in Encase format. I recovered some partitions and pictures from the image using "Active File Recovery" tool.

The Hard drive was seized from the leader of a criminal gang. I have to determine what was done with the hard drive.

How will I determine that?

Please reply asap. Thanks.
 
 
  

athulin
Senior Member
 

Re: How to determine what happened to the hard drive?

Post Posted: Jan 20, 20 07:10

- robin1234
The Hard drive was seized from the leader of a criminal gang. I have to determine what was done with the hard drive.


If this is true ... then you are apparently in over your head, as you presumably have a job that you have to ask how you do it. Have a chat with your boss or supervisor or whatever.

If it is not literally true, ... say, you are a student and have got this as an assignment or a test ... you better say so. Or refrmulate your question ... it needs to be less clueless. You'll get better replies that way, too.  
 
  

AccessDenied
Newbie
 

Re: How to determine what happened to the hard drive?

Post Posted: Jan 20, 20 11:33

Hey, it would help if you tell us what exactly it is you wish to achieve.  
 
  

vkskain
Member
 

Re: How to determine what happened to the hard drive?

Post Posted: Feb 10, 20 14:39

Hi, first read about MBR, MFT and Files System  
 

Page 1 of 1