Anything related to computer forensics (new section!)
March 24th, 2015, 14:00
This sounds easy. From what I know everyone can completly delete files by fullfilling the HDD or using specialized tools for overwrittening. What happens with metadata files. When someone tries to recover overwritten files with specialized tools (such as EnCase) many little files (I call them logs) are shown. These files contains the original name of the deleted/overwritten files and very important metadata informations.
How can these logs / metadata files could be permanently deleted or not able to be shown in an eventual recovery session?
If there's no way to completly rid of them then how could I strip these important information from the files, delete and then overwrite them?
Thanks!
March 24th, 2015, 14:07
if you so paranoid on the data melt down the drive
March 24th, 2015, 14:08
Active KillDisk free version can do a complete zero fill of the drive. There's nothing that can be recovered from that.
March 24th, 2015, 14:37
jermy wrote:if you so paranoid on the data melt down the drive
Not paranoid at all, this already happened so want to take precautions.
Active KillDisk - thanks, so I guess it will look like a brand new HDD
March 24th, 2015, 15:38
Spildit wrote:Secure erase using internal drive functionality (by ATA standard) looks like a more secure option, in particular if you have bad sectors.
Because "normal" tools will not wipe the sectors on G-List (relocated ones).
Unless you are using some buggy samsung drives and on that case secure erase will not be that secure lol
And how exactly can this be done? I'm a newb on this subject.
Powered by phpBB © phpBB Group.