+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Pentesting and Forensics (https://hackforums.net/forumdisplay.php?fid=231)
+---- Thread: RECOVERY DATA (/showthread.php?tid=5870229)
RECOVERY DATA - bigklaus66 - Aug 5, 2018
according to you which is the professional paid software millet for recovering data from broken or impaled hard disks
RE: RECOVERY DATA - CyberStrike - Aug 5, 2018
Impaled? What did you do? Generally for physically damaged drives you are looking at rebuilding with the same components. I would suggest also using a write blocker.
http://www.forensicfocus.com/Forums/viewtopic/t=14555/
https://www.forensicmag.com/article/2013/05/between-rock-and-hard-drive
Generally if you can get the drive to boot just recognizable then you want to create an image of that drive, I personally tend to use foremost and rescuemagic, but generally use CAINE Linux when I do real forensics/IncidentResponse. FTK Imager did have a free copy before not sure if it's still available. I'll try to find more resources.
Edit: A hexeditor is also important when working with forensics.
RE: RECOVERY DATA - Last_viking - Aug 5, 2018
Encase it can recover disks
But encase is not free
RE: RECOVERY DATA - CyberStrike - Aug 6, 2018
(Aug 5, 2018 10:25 AM)last viking Wrote: Encase it can recover disks
But encase is not free
3500 dollars US for encase. Data recovery is something that isn't just install a program and boot up a drive there is a methodology with such things, we are not even talking about chain of custody in this case just recovery. OP I really suggest reading the following book before attempting anything
Digital Forensics with Open Source Tools
BTW for a professional to do recovery you are look at 1 dollar (US) per megabyte recovered. OP when you said "impaled" what exactly did you mean?
RE: RECOVERY DATA - кrew - Aug 6, 2018
try FTK imager it is free and you can get an idea of what you are looking at
https://accessdata.com/product-download/ftk-imager-version-4.2.0
Oh damage to the hard drive wouldn't require software but the drive to be repaired first.
RE: RECOVERY DATA - CyberStrike - Aug 7, 2018
This is the hard part is the amount of "damage" at a certain point it's time for a clean room and professional help.
It really helps if OP comes back with the model of the HDD and the extent of damage.
Edit: Messaged the user and asked them to check back in.
RE: RECOVERY DATA - bigklaus66 - Aug 8, 2018
si il danno è importante non viene riconosciuto hard disk e fa dei rumori tac tac tac
non riesco a farlo vedere nel pc con i software non và
RE: RECOVERY DATA - CyberStrike - Aug 9, 2018
(Aug 8, 2018 11:40 PM)bigklaus66 Wrote: si il danno è importante non viene riconosciuto hard disk e fa dei rumori tac tac tac
non riesco a farlo vedere nel pc con i software non và
English would greatly help I am guessing you are speaking Italian?
According to Translate he wrote :
Quote:yes the damage is important is not recognized hard disk and makes noise tac tac tac
I can not show it in the pc with the software does not go
What model is this drive? Is it a SeaGate? If so what is the exact model?
RE: RECOVERY DATA - owenhackz - Aug 14, 2018
Usually data recovery from broken HDD's you'd need a dustfree environment to swap the platters over to a new similar working drive. hope this helps you bro
-Owenhackz
RE: RECOVERY DATA - CyberStrike - Aug 14, 2018
Well hopefully he comes back depending on the HD maker and model you can have different repair nuances which can denote if specialized hardware or software maybe needed.