Scott A Moulton on new beta software deepspar video

[craig6928]

this is a very good to watch as he talking about a new beta program for the deepspar
this year



Scott A Moulton recorded this video at the conference called Outerz0ne in Atlanta, Georgia on March 20th 2010. This recording is about Data Recovery and a new process called MFT & File Based Imagin...


enjoy


http://www.youtube.com/watch?v=uLOmywCf ... 81&index=0

[Zero Alpha]

Not exactly revolutionary technology.

[BlackST]

What did you expect ? Data Recovery ?

[lcoughey]

Not exactly revolutionary technology.

I think I would be remiss not to challenge this comment. This is very revolutionary technology that has not been done before.

It shouldn't come as a surprise that drive imaging is done in a linear fashion from sector 0 to the highest LBA. With better imaging tools, you can bounce around the source and stitch different sections together. But, the main idea is to minimize the amount of head movement during the imaging process.

While other data recovery tools give the user the ability to recover by browsing the file system, DeepSpar has chosen a faster and much safer route of selecting the sectors that contain the file fragments. This way, the user can enter a file mask (ie, *.jpg; *.doc) and force the imager to image only those sectors which contain fragments of those files while still imaging in a linear process from sector 0 to the hight LBA.

In cases where the source drive is somewhat healthy or the number of target files is small, this feature is likely nothing too exciting. However, in most cases where the volume of files is high, the drive is unstable, has a failing head or even has some media damage within the $MFT, the method provided by DeepSpar will provide a faster image of the selected files while minimizing the wear on the failing drive.

After using this feature, just as it was when I first used the Image by Heads feature, I'm finding it very difficult to work without it now.

[HDD Spaz]

Isn't this the same as imaging selected files, create map of selected files option in DE?

[lcoughey]

Isn't this the same as imaging selected files, create map of selected files option in DE?

Not really. DE will recover one file at a time and force the heads to bounce all over the place. Rather, DeepSpar's Imager selects the sectors tied to the requested files and only images those sectors in a linear format...basically skipping the unselected sectors for a faster image of the targeted files.

[Starling]

In DE you can build map of selected files, then sort chains by LBA and image chains.
So technically it's the same although requires some extra moves in DDI.
Also building submap on map in DE is a great feature.

[lcoughey]

In DE you can build map of selected files, then sort chains by LBA and image chains.
So technically it's the same although requires some extra moves in DDI.
Also building submap on map in DE is a great feature.

This is true...I overlooked that side of things and it is a great point. However, the key point is that this is a great feature to be incorporated into the DeepSpar Imager and is worthy of noting.

[HDD Spaz]

Not exactly revolutionary technology.

This is very revolutionary technology that has not been done before.

They copied Data Extractor. Had this feature a long time ago.

[Starling]

However, the key point is that this is a great feature to be incorporated into the DeepSpar Imager and is worthy of noting.

Sure thing.
When it comes to imaging algorithm flexibility and speed DDI is much better.
Although I personally prefer to use DE when I need less than 20-30GB and DDI when I need full image or all files.

[drc]

They copied Data Extractor. Had this feature a long time ago.

Well they are made by the same group, so I don't know if "copied" is quite the right term...

IMO it is nice that Deepspar can do this as you don't have to do the extra steps required to do it in DE, or tie up one of your PC3K stations for who-knows-how-long.

I will say that the current implementation is limited by its NTFS-only-ness.

[thatdellguy]

This is not a new way to recover files from a failing drive as Mr. Scott describes. It is only the cheapest and most difficult method. This recovery method has been used for years and years. The whole process needs to be streamlined like DE. And yes, DE can organize the requested files by LBA chain order to minimize head movement.

[drc]

And the obvious limitations of only finding files that exist according to the filesystem, which may or may not be intact

[pcrecovery]

Quite useful on very large hard drives especially. I have made a habit of using this first, then full image later. Very relieved to get most important folders first.

The Image explorer application is quite nice. A welcomed feature for sure.

[lcoughey]

We have a project here now where imaging by head and file mask is very handy. The 1TB source drive is almost full with 1 head with issues. We mirrored the other 7 heads (I think it is 7) first. Then, we scanned the $MFT. We initially filtered by *.jpg;*.avi, but found that it was more than 500GB of data, due to recorded TV shows and movies. After taking a quick peak at the file system, we were able to narrow in on a folder called PICS, which contains all the family photos and videos. Now we need only target 33GB without thrashing the heads all over the place, knowing that we likely only need to mirror 1/8 of that, thanks to getting the other 7/8 earlier on.