Recover Data (Ch 2 : 5.5.4)

Question 1

Recover My Files

Answer 1

Recover My Files data recovery software will recover deleted files emptied from the Windows Recycle Bin, or lost because of the format or corruption of a hard drive, virus or Trojan infection, and unexpected system shutdown or software failure.
Recover My Files can preview the data “on-the-fly” while searching.
Recover documents, photos, video, music, and email
Recover from a hard drive, camera card, USB, Zip, floppy disk, iPod, and other media

Question 2

EASEUS Data Recovery Wizard

Answer 2

It is hard drive data recovery software to recover data lost from PCs, laptops, or other storage media because of deleting, formatting, partition loss, OS crash, virus attack etc.

Supports large hard disk

Question 3

Advanced Disk Recovery

Answer 3

Advanced Disk Recovery scans the entire system for deleted files and folders and provides an opportunity to recover them. Hard drives, partitions, external devices, and even CDs and DVDs can be scanned for recoverable files using Advanced Disk Recovery. The software offers two types of scans. The Quick Scan uses the Master File Table to find all files with the same filename. The Deep Scan uses file signatures to search for deleted files or folders. After either type of scan, one can preview the deleted files and folders, and restore any or all of them to the location of choice. With just a few clicks, one can locate and restore most of the deleted files

Question 4

Ontrack EasyRecovery

Answer 4

Ontrack EasyRecovery is a data recovery software ready to retrieve missing files. It recovers data and also protects it.

Question 5

UndeletePlus

Answer 5

Recovers documents, photos, video, music, and email  Recover files - even those emptied from the Recycle Bin  File recovery after accidental format - even if one has reinstalled Windows
 Recover files from hard drives, USB thumb drives, camera media cards, floppy disks, and other storage devices

Question 6

AccessData’s FTK

Answer 6

FTK Imager is a data preview and imaging tool that enables analysis of files and folders on local hard drives, CDs/DVDs, network drives, and examination of the content of forensic images or memory dumps. FTK Imager can also create MD5 or SHA1 hashes of files, review and recover files deleted from the Recycle Bin, export files and folders from forensic images to disk and mount a forensic image to view its contents in Windows Explorer

Question 7

EnCase Forensic

Answer 7

EnCase is a popular multi-purpose forensic platform that includes many useful tools to support several areas of the digital forensic process. This tool can collect a lot of data from many devices and extract potential evidence. It also generates an evidence report.
EnCase Forensic can help investigators acquire large amounts of evidence, as fast as possible from laptops and desktop computers to mobile devices. EnCase Forensic directly acquires the data and integrates the results into the cases
Search choises like Grep, Conditional, Boolean, Word searches

Question 8

The Sleuth Kit (TSK

Answer 8

The Sleuth Kit (TSK) is a library and collection of command line tools that allows investigating disk images. The core functionality of TSK allows analyzing volume and filing system data. The plug-in framework also allows incorporating additional modules to analyze file contents and build automated systems. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.