hard disk recovery....
 
Notifications
Clear all

hard disk recovery...

5 Posts
3 Users
0 Likes
417 Views
(@bombone)
Posts: 62
Trusted Member
Topic starter
 

My friend give me an hard disk. There is lot of trouble in the logic not in the electronic.
I am trying to recover doing a forensic copy by FTK Imager. But He produced only two E01 file…
Which tool you can suggest me?
Thanks

 
Posted : 05/03/2014 6:34 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

My friend give me an hard disk. There is lot of trouble in the logic not in the electronic.
I am trying to recover doing a forensic copy by FTK Imager. But He produced only two E01 file…
Which tool you can suggest me?
Thanks

dd or ddrescue.

Under Windows, a good tool is datarescuedd
http//www.datarescue.com/photorescue/v3/drdd.htm
(if you need to image in chinks and/or need reverse direction)

Otherwise just use DMDE (which is also suggested as useful for the actual data recovery) and make a plain "dd like" image with it
http//dmde.com/

jaclaz

 
Posted : 06/03/2014 12:17 am
Igor_Michailov
(@igor_michailov)
Posts: 529
Honorable Member
(@bombone)
Posts: 62
Trusted Member
Topic starter
 

Thank you all for kind answer, I will check links later. Actually I tried to acquire the drive by FTK imager both E01 and DD, and I also used Stellar Phoenix Windows data Recory.
Nobody can identify the film system, and found a lot of bad blocks
thanks

 
Posted : 06/03/2014 3:59 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

Well, no.
If there are bad sectors, there are issues in the hardware (electronics) not in the filesystem (logic), or not only in it.
A forensic tool such as the FTK imager is suitable for working hardware, just like "plain" dd.
Recovery tools such as ddrescue and similar are intended to rescue or recover as much data as possible and they usually do a good work, but they cannot obviously do miracles with failing or failed drives that may need - where possible - hardware or firmware repairs.
Interpreting the (partial) data that you may obtain through the recovery of good sectors is another thing, for which the mentioned DMDE is suited, but of course you need to know where your towel is.
The Stellar Info thingy is (for my personal tastes) a bit too "automagic".

jaclaz

 
Posted : 06/03/2014 4:27 pm
Share: