Join Us!

How to determine wh...
 
Notifications
Clear all

How to determine what happened to the hard drive?  

  RSS
robin1234
(@robin1234)
New Member
Hi, everyone!

I made an image of a External Hard drive using FTK Imager. The image is in Encase format. I recovered some partitions and pictures from the image using "Active File Recovery" tool.

The Hard drive was seized from the leader of a criminal gang. I have to determine what was done with the hard drive.

How will I determine that?

Please reply asap. Thanks.

Quote
Posted : 20/01/2020 12:43 am
athulin
(@athulin)
Community Legend

The Hard drive was seized from the leader of a criminal gang. I have to determine what was done with the hard drive.

If this is true … then you are apparently in over your head, as you presumably have a job that you have to ask how you do it. Have a chat with your boss or supervisor or whatever.

If it is not literally true, … say, you are a student and have got this as an assignment or a test … you better say so. Or refrmulate your question … it needs to be less clueless. You'll get better replies that way, too.

ReplyQuote
Posted : 20/01/2020 7:10 am
AccessDenied
(@accessdenied)
New Member

Hey, it would help if you tell us what exactly it is you wish to achieve.

ReplyQuote
Posted : 20/01/2020 11:33 am
vkskain
(@vkskain)
New Member

Hi, first read about MBR, MFT and Files System

ReplyQuote
Posted : 10/02/2020 2:39 pm
Share: