All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 15 posts ] 
Author Message
 Post subject: PC3K UDMA vs UFS Exploere Vs R-studio vs Any other Tool
PostPosted: July 12th, 2024, 23:17 
Offline

Joined: November 23rd, 2010, 13:32
Posts: 509
Location: brisbane
As bitlocker cases are rising I would like to know your opinion on which is best software for Bitlocker corruption / Clear Key type encryption logical recoveries as well as Bitlocker recovery (password is known) cases
I don't own other 2 software but have PC3K .I have tried UDMA few times but it takes too much time & result was not so encouraging.
Other softwares like m3 bitlocker recovery or Hasleo are not pro type.
What is your opinion or experience ? Should I stick to UDMA only ?
Thanks


Top
 Profile  
 
 Post subject: Re: PC3K UDMA vs UFS Exploere Vs R-studio vs Any other Tool
PostPosted: July 13th, 2024, 1:31 
Offline
User avatar

Joined: September 16th, 2015, 9:06
Posts: 288
Location: Poland
What do you mean by "takes too much time & result was not so encouraging"? If there's no partition info or beginning of drive is unrecoverable you check in RAW if there are any BL informations found in 30% and 60% of drive's LBA and use them if found. Data Extractor can help in those cases. Also it has a database with known keys so it helps with some cases where BL was turned on not by user.
That are two types of cases i use it for.

_________________
odzyskiwanie danych


Top
 Profile  
 
 Post subject: Re: PC3K UDMA vs UFS Exploere Vs R-studio vs Any other Tool
PostPosted: July 13th, 2024, 3:19 
Offline

Joined: November 23rd, 2010, 13:32
Posts: 509
Location: brisbane
melvin wrote:
What do you mean by "takes too much time & result was not so encouraging"? If there's no partition info or beginning of drive is unrecoverable you check in RAW if there are any BL informations found in 30% and 60% of drive's LBA and use them if found. Data Extractor can help in those cases. Also it has a database with known keys so it helps with some cases where BL was turned on not by user.
That are two types of cases i use it for.


Thanks .In previous cases both trial versions gave better results & speed than udma .In raw recovery also udma gave too many false positives.


Top
 Profile  
 
 Post subject: Re: PC3K UDMA vs UFS Exploere Vs R-studio vs Any other Tool
PostPosted: July 13th, 2024, 3:30 
Offline
User avatar

Joined: September 16th, 2015, 9:06
Posts: 288
Location: Poland
In DE you just scan few milions LBA max to find BL info than use it as virtual drive. Takes few minutes max.
Maybe there's something you do different way.


Attachments:
IMG_20190426_154648.jpg
IMG_20190426_154648.jpg [ 675.75 KiB | Viewed 4728 times ]

_________________
odzyskiwanie danych
Top
 Profile  
 
 Post subject: Re: PC3K UDMA vs UFS Exploere Vs R-studio vs Any other Tool
PostPosted: July 13th, 2024, 3:52 
Offline

Joined: October 3rd, 2005, 0:40
Posts: 4471
Location: Hungary
raw scan speed is affected by the amount of file types selected

_________________
Adatmentés - Data recovery


Top
 Profile  
 
 Post subject: Re: PC3K UDMA vs UFS Exploere Vs R-studio vs Any other Tool
PostPosted: July 13th, 2024, 7:13 
Offline

Joined: November 23rd, 2010, 13:32
Posts: 509
Location: brisbane
melvin wrote:
In DE you just scan few milions LBA max to find BL info than use it as virtual drive. Takes few minutes max.
Maybe there's something you do different way.

Thanks a lot melvin
Yes I was not doing like this , very much useful when bitlocker metadata is corrupted.


Top
 Profile  
 
 Post subject: Re: PC3K UDMA vs UFS Exploere Vs R-studio vs Any other Tool
PostPosted: July 13th, 2024, 7:13 
Offline

Joined: November 23rd, 2010, 13:32
Posts: 509
Location: brisbane
pepe wrote:
raw scan speed is affected by the amount of file types selected


yes Thanks


Top
 Profile  
 
 Post subject: Re: PC3K UDMA vs UFS Exploere Vs R-studio vs Any other Tool
PostPosted: July 15th, 2024, 12:27 
Offline

Joined: February 19th, 2011, 11:05
Posts: 325
Location: Toronto
terminator2 wrote:
As bitlocker cases are rising I would like to know your opinion on which is best software for Bitlocker corruption / Clear Key type encryption logical recoveries as well as Bitlocker recovery (password is known) cases

You may test R-Studio working with BL in its demo mode, that is, for free. The Technician/T80+ version.

_________________
R-Studio Data Recovery Software


Top
 Profile  
 
 Post subject: Re: PC3K UDMA vs UFS Exploere Vs R-studio vs Any other Tool
PostPosted: July 15th, 2024, 23:15 
Offline

Joined: November 23rd, 2010, 13:32
Posts: 509
Location: brisbane
Alt(R-TT) wrote:
terminator2 wrote:
As bitlocker cases are rising I would like to know your opinion on which is best software for Bitlocker corruption / Clear Key type encryption logical recoveries as well as Bitlocker recovery (password is known) cases

You may test R-Studio working with BL in its demo mode, that is, for free. The Technician/T80+ version.


Thanks .I was not aware of T80 version. This seems to be best software in terms of features / pricing etc.
I have a running case , I will try T80 version & if it serves my purpose will buy it immediately though I have R-studio license as well.


Top
 Profile  
 
 Post subject: Re: PC3K UDMA vs UFS Exploere Vs R-studio vs Any other Tool
PostPosted: July 17th, 2024, 11:33 
Offline

Joined: November 23rd, 2010, 13:32
Posts: 509
Location: brisbane
While none of the above was 100 % successful in recovering this case , R-studio was far better than much hyped UFS.
However something else worked well in giving justice to this case .
Gist of the story --not necessary that cost of the tool matters always for ultimate success.


Top
 Profile  
 
 Post subject: Re: PC3K UDMA vs UFS Exploere Vs R-studio vs Any other Tool
PostPosted: July 30th, 2024, 9:11 
Offline

Joined: March 7th, 2009, 12:43
Posts: 1083
Location: Angel Data Recovery
terminator2 wrote:
While none of the above was 100 % successful in recovering this case , R-studio was far better than much hyped UFS.
However something else worked well in giving justice to this case .
Gist of the story --not necessary that cost of the tool matters always for ultimate success.

Can you elaborate this ?
R-studi0 was better in fail ? How did you measure fail if nothing been recovered ?

_________________
Angel Data Recovery


Top
 Profile  
 
 Post subject: Re: PC3K UDMA vs UFS Exploere Vs R-studio vs Any other Tool
PostPosted: July 30th, 2024, 11:09 
Offline

Joined: November 23rd, 2010, 13:32
Posts: 509
Location: brisbane
DR-Kiev wrote:
terminator2 wrote:
While none of the above was 100 % successful in recovering this case , R-studio was far better than much hyped UFS.
However something else worked well in giving justice to this case .
Gist of the story --not necessary that cost of the tool matters always for ultimate success.

Can you elaborate this ?
R-studi0 was better in fail ? How did you measure fail if nothing been recovered ?


Hi DR-Kiev
I have got success with this case but all above mentioned tools couldn't give justice to the case (This often happens )
While UFS explorer didn't show anything R-studio showed partial data. Considering update frequency , pricing I am sure its best candidate to buy.
PC3K is not specific bitlocker solution as its primary role is for FW recoveries .I have never been able to recover anything logically from DE ,raw recovery is worst with DE.


Top
 Profile  
 
 Post subject: Re: PC3K UDMA vs UFS Exploere Vs R-studio vs Any other Tool
PostPosted: July 31st, 2024, 4:52 
Offline
User avatar

Joined: January 28th, 2009, 10:54
Posts: 3488
Location: Greece
terminator2 wrote:
I have got success with this case but all above mentioned tools couldn't give justice to the case (This often happens )
While UFS explorer didn't show anything R-studio showed partial data. Considering update frequency , pricing I am sure its best candidate to buy.
PC3K is not specific bitlocker solution as its primary role is for FW recoveries .I have never been able to recover anything logically from DE ,raw recovery is worst with DE.


I kindly disagree with almost everything in this sentence :)

R-studio is a good tool and all, but UFS is very powerful and gives you a lot of freedom if you know what you're doing. To me, UFS is the best tool out there, hands down.
DE is very good with raw recovery. It also gives you good option to create/add more signatures easily. R-Studio also very good with raw.
DE (and UFS) has a very nifty way to add Bitlocker metadata to your search and create BL partition and extract data from them.

Apparently, you can't judge a tool from a failed recovery, unless one tool gives you good success with data and the other doesn't show anything. You need to compare many times, but you'll find out that all tools have pros and cons.
Currently, to me UFS has the most pros and least cons.

_________________
http://www.northwind.gr
SandForce SSD Recovery
Ransomware Reverse Engineering - NoMoreRansom! partners


Top
 Profile  
 
 Post subject: Re: PC3K UDMA vs UFS Exploere Vs R-studio vs Any other Tool
PostPosted: July 31st, 2024, 6:48 
Offline

Joined: November 23rd, 2010, 13:32
Posts: 509
Location: brisbane
northwind wrote:
terminator2 wrote:
I have got success with this case but all above mentioned tools couldn't give justice to the case (This often happens )
While UFS explorer didn't show anything R-studio showed partial data. Considering update frequency , pricing I am sure its best candidate to buy.
PC3K is not specific bitlocker solution as its primary role is for FW recoveries .I have never been able to recover anything logically from DE ,raw recovery is worst with DE.


I kindly disagree with almost everything in this sentence :)

R-studio is a good tool and all, but UFS is very powerful and gives you a lot of freedom if you know what you're doing. To me, UFS is the best tool out there, hands down.
DE is very good with raw recovery. It also gives you good option to create/add more signatures easily. R-Studio also very good with raw.
DE (and UFS) has a very nifty way to add Bitlocker metadata to your search and create BL partition and extract data from them.

Apparently, you can't judge a tool from a failed recovery, unless one tool gives you good success with data and the other doesn't show anything. You need to compare many times, but you'll find out that all tools have pros and cons.
Currently, to me UFS has the most pros and least cons.


Yes northwind
I agree ,I am unable to exploit full capabilities of PC3K for Bitlocker case. I have observed lots of false positives with DE in raw recovery cases. My opinion was based on my skill level , cost of tool etc.But trial version of R-studio has clearly recreated more data than UFS (approch of every tool is different and some tools work better for particular case)Where can I get more insight on how to recover bitlocker metadata & rebuild partition using DE
Thanks


Top
 Profile  
 
 Post subject: Re: PC3K UDMA vs UFS Exploere Vs R-studio vs Any other Tool
PostPosted: August 1st, 2024, 3:19 
Offline
User avatar

Joined: January 28th, 2009, 10:54
Posts: 3488
Location: Greece
I believe Ace has documented this in their DE manual, but from memory:
If you raw scan a BL drive and metadata is there, DE will find it. Then, right click > Add Virtual Partition.

_________________
http://www.northwind.gr
SandForce SSD Recovery
Ransomware Reverse Engineering - NoMoreRansom! partners


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 15 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: aekhv and 7 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group