View topic - Million $ question, for data recovery enthusist and new bees

Main » Forums home » Conventional hard drives

All times are UTC - 5 hours [ DST ]

Million $ question, for data recovery enthusist and new bees

Page 1 of 1

[ 5 posts ]

Previous topic | Next topic

Author

Message

chipsang

Post subject: Million $ question, for data recovery enthusist and new bees

Posted: December 11th, 2009, 7:56

Joined: June 5th, 2006, 1:09
Posts: 93
Location: INDIA

I wonder how professional companies and forensic experts recover data ? Besides so many softwares , analysing MFTS and recovering data manually must be only option for maximum efficiency.
If a folder xyz is deleted from ntfs partition and another folder of same name but differnet files is added , can mft analysis trace original folder? ( Of course if it is not overwritten) Can someone guide me the how to begin.I am willing to put effoorts , need little help. grateful to all

Top

guru

Post subject: Re: Million $ question, for data recovery enthusist and new bees

Posted: December 11th, 2009, 11:26

Joined: May 5th, 2004, 20:06
Posts: 2782
Location: England

for Million $ I can help

_________________
All went well until I plugged the drive in.

Top

harddrivespecialist

Post subject: Re: Million $ question, for data recovery enthusist and new bees

Posted: December 11th, 2009, 12:38

Joined: January 15th, 2008, 11:06
Posts: 1419
Location: Providence, RI. Boston, MA USA

I'll do it for 1/2 price! $500,000.00 is good enough!

_________________
www.datarecoveryne.com

Top

Hexed

Post subject: Re: Million $ question, for data recovery enthusist and new bees

Posted: December 11th, 2009, 13:28

Joined: February 4th, 2009, 14:40
Posts: 64
Location: Georgia

If I was doing it, I would forget the folder and look for the MFT file records for the old files.

Top

narro

Post subject: Re: Million $ question, for data recovery enthusist and new bees

Posted: December 11th, 2009, 22:23

Joined: February 23rd, 2007, 13:41
Posts: 13

Even if the original MFT record was overwritten, you can search for the right Data Runs of the delete MFT Record on the LogFile.

Good Luck !

Top

Page 1 of 1

[ 5 posts ]

Main » Forums home » Conventional hard drives

All times are UTC - 5 hours [ DST ]

Who is online

Users browsing this forum: No registered users and 51 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum