Data Recovery
October 29, 2016
Categorised in: Computer Forensic & Cyber Applications
There are two main forms of data recovery in FAT and NTFS file systems: recovering deleted data from unallocated space and recovering data from slack space.
WINDOWS BASED RECOVERY TOOLS
EnCase, FTK, and X-Ways
UNIX BASED RECOVERY TOOLS
Sleuth Kit and SMART
FILE CARVING WITH WINDOWS
Forensic tools such as EnCase, FTK, and X-Ways have file carving functionality and can be configured with user-defined file headers and footers.
In addition, specialized file carving tools such as DataLifter (Figure 17.9) can recover many types
of files including graphics, word processing, and executable files.
Some of these tools can extract images from other files such as images stored in Word documents.
DEALING WITH PASSWORD PROTECTION AND ENCRYPTION
Pratik Kataria is currently learning Springboot and Hibernate.
Technologies known and worked on: C/C++, Java, Python, JavaScript, HTML, CSS, WordPress, Angular, Ionic, MongoDB, SQL and Android.
Softwares known and worked on: Adobe Photoshop, Adobe Illustrator and Adobe After Effects.