How to determine wh...
 
Notifications
Clear all

How to determine what happened to the hard drive?

4 Posts
4 Users
0 Likes
608 Views
(@robin1234)
Posts: 1
New Member
Topic starter
 
Hi, everyone!

I made an image of a External Hard drive using FTK Imager. The image is in Encase format. I recovered some partitions and pictures from the image using "Active File Recovery" tool.

The Hard drive was seized from the leader of a criminal gang. I have to determine what was done with the hard drive.

How will I determine that?

Please reply asap. Thanks.

 
Posted : 20/01/2020 12:43 am
(@athulin)
Posts: 1156
Noble Member
 

The Hard drive was seized from the leader of a criminal gang. I have to determine what was done with the hard drive.

If this is true … then you are apparently in over your head, as you presumably have a job that you have to ask how you do it. Have a chat with your boss or supervisor or whatever.

If it is not literally true, … say, you are a student and have got this as an assignment or a test … you better say so. Or refrmulate your question … it needs to be less clueless. You'll get better replies that way, too.

 
Posted : 20/01/2020 7:10 am
AccessDenied
(@accessdenied)
Posts: 6
Active Member
 

Hey, it would help if you tell us what exactly it is you wish to achieve.

 
Posted : 20/01/2020 11:33 am
(@vkskain)
Posts: 14
Active Member
 

Hi, first read about MBR, MFT and Files System

 
Posted : 10/02/2020 2:39 pm
Share: