All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 4 posts ] 
Author Message
 Post subject: Delete Data
PostPosted: May 17th, 2022, 22:40 
Offline

Joined: November 24th, 2011, 21:48
Posts: 103
Location: Canada
Here's an odd one folks -

We have been assigned a task to delete data from a HDD which contains "data".
This "data" should not be able to be recovered by anyone - so my plan is as follows:

1. Create image by MFT of the source HDD. This will not include deleted objects - or at the very least minimize what can be recovered.
2. Secure erase the source HDD and then write the image obtained by MFT to the HDD.
3. Search the media for any other "data" and then identify the sector(s) of each file which contains this "data" and write FF to the sectors which contain this "data".

Anyone know of software which will determine the sectors "data" is located on and replace with 00 or FF?

I know R-Studio (among other software tools) will provide the sectors allocated - but I there isn't exactly a quick and easy way to "fill" the sectors with a pattern.

"data" = bad stuff.


Top
 Profile  
 
 Post subject: Re: Delete Data
PostPosted: May 18th, 2022, 2:09 
Offline

Joined: January 18th, 2010, 23:53
Posts: 335
Location: india
Actually what is your need

1. Deleted Data Should not be Recovered by anyway
2. Live DATA only should be there

is it correct?

What tools u have Such as PC3K?


Top
 Profile  
 
 Post subject: Re: Delete Data
PostPosted: May 18th, 2022, 2:51 
Offline

Joined: November 7th, 2020, 5:31
Posts: 1084
Location: The_UK
Are you trying to ask how to overwrite all LBA outside of the mft? Why not just copy the "good" data to a donor, secure erase the patient to destroy the "bad" data and then copy the good data back.

_________________
Data Recovery Services in the UK.
https://www.usbrecovery.co.uk/


Top
 Profile  
 
 Post subject: Re: Delete Data
PostPosted: May 18th, 2022, 9:47 
Offline

Joined: November 24th, 2011, 21:48
Posts: 103
Location: Canada
Quote:
Are you trying to ask how to overwrite all LBA outside of the mft? Why not just copy the "good" data to a donor, secure erase the patient to destroy the "bad" data and then copy the good data back.


Perhaps I explained poorly but what you just wrote was my idea / intent. The only issue is that legit MFT records may still contain some "bad" data. So I have to manually find the bad "data" record the sectors the bad "data" is on, then fill those with 00 / FF.

I was hoping there was a program which would allow me to create ranges of sectors / LBA's, etc. which I could then quickly instruct to wipe or fill.

I have PC3000 / UFS / R-Studio - the typical stuff.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 4 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Google [Bot] and 65 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group