How To Recover Evidence Off A Computer www.binarybiz.com VirtualLab recovers data from most types of rotating media http://www.cyberus.ca/~danpenny/ Index of free programs such as Drive Rescue.zip http://www.datalink.com/whitepapers/Recoverability/index.cfm?=bitpipe#form Data Recovery White Paper http://www.theabsolute.net/sware/dskinv.html Disk Investigator is free and helps you to discover all that is hidden on your computer hard disk http://www.ntfs.com/products.htm Data Recovery Software Tools - freeware and shareware downloads http://www.pcinspector.de/file_recovery/uk/url.htm PC Inspector File Recovery software www.r-tt.com R-Tools Technology Inc. is the leading provider of powerful data recovery, undelete, drive image, backup and PC privacy utilities for the Windows OS family www.recovermyfiles.com
Recover My Files will search your hard drive at a sector level to recover deleted files emptied from the Windows Recycle Bin www.techpathways.com ProDiscover Investigator, forensically examine remote systems http://www.sharewarejunction.com/info.asp?ProductID=6825 The FREEWARE utility NTFS Reader is a data recovery tool that provides read access to NTFS drives from MS DOS environment. http://www.topiawebsearch.com/Computers/Hardware/Storage/DataRecovery/ Search result of Data recovery software http://www.webattack.com/Freeware/system/fwdatarecovery.shtml File Scavenger, A NT/2000/XP file undelete and data recovery utility for NTFS volumes. How To Protect Your Computer Data From Being Evidence Against You
Identity and information theft is a very real threat, and deleting data or even formatting your hard drive is just not enough to protect your data from thieves. Do not just through out an old hard drive or just format it. The data IS still recoverable. When you sell or donate a computer, remove the hard drive first. Take a Sludge Hammer to the data media (Only small pieces left!).
Melt it down to a liquid state.
Use a wiping or cleaning utility as listed below www.backupwhiz.com/software/fileutilities/undeletetools/index.html Undelete and Recovery Tools Downloads www.iolo.com/ss/index.cfm System Shield is your powerful, easy to use solution against information and identity theft www.jetico.com Jetico, Inc. develops and supports the BestCrypt and BCWipe software products - strong, reliable and easy-to-use data encryption and data deletion packages. Download a free 30-day trial; a single-user license is $29.95. www.tucows.com/diskc95_default.html A list of utilities and Disk cleaners www.webattack.com/freeware/security/fwerase.html Freeware is UltraWipe
Your hard drive fails and it is still under warranty. Under terms of the warranty the old drive must be returned to get a free replacement. What about highly sensitive data on server drives? The drive is gone bad so how do you use software to erase it? Take the drive to your local gun club or police department firing range. All you need is 10-20 holes. This way no utility in the world will recover any data. IBM has accepted a bullet-ridden hard drive in this condition. When you are about to return a defective hard drive, think twice. Your career might be on the line. When you are about to return a defective hard drive, think twice. Your career might be on the line.
Before you through out that hard drive completely Erase the drive dban.sourceforge.net (DBAN). This is a complete, self-contained Linux boot floppy that erases the data on any hard drive connected to the system you boot it on.
spanCreating an Eraser floppy
This disk when used on startup will automatically erase all data, partitions, and MBR from all hard drives connected to your computer. Draw a scull on the disk to warn people not to use it. Becarefull this is a very dangerous disk in the wrong hands.
First create a clean boot disk using Windows 98.
This boot disk should contain the Command.com, Io.sys, and Msdos.sys files.
added Efdisk.exe command line partitioning utility.
Add IBM's Wipe.com hard drive wiping utility.
add the freeware Beep.exe this program will generate a beep or sound when the wiping process is complete.
Finally, created an Autoexec.bat file that would use the aforementioned programs to wipe the hard drive:
----------Start
Efdisk /delall
echo Y | wipe 0
Efdisk /mbr
:mary
@echo off
BEEP /HE /L500
BEEP /HD /L100
BEEP /HC /L300
BEEP /HD /L300
BEEP /HE /L300
BEEP /HE /L300
BEEP /HE /L700
goto :mary
-------------------END
The last section Mary plays, a rendition of "Mary Had A Little Lamb." to let you know it is finished. Back To Main Page
Windows Forensics Stuff
Back To Main Page
