RE: Computer Forensics 05-29-2019, 02:55 PM
#11
(05-28-2019, 04:38 PM)Sartux Wrote:(05-21-2019, 06:29 AM)Magnetron Wrote: Forensics can still be useful in the event of a crash or accidentally deleting your own stuff, however.That's damn impressive. Good work.
I recovered a video that took me 16 hours to edit one time. Another time, the piece of shit Windows Disk Manager deleted all 8 partitions on a 2TB drive. One partition in particular was very difficult to recover but I did it. And the ultimate: a 250GB USB stick failed and the filesystem was corrupted so I had no choice but to recover everything by hand, a process which took 6 months. Every repair shop told me it would be impossible, every tech forum on the internet said the same. I offered $10,000 to anyone who could do it and nobody took the offer. I did the impossible.
Forensics is pretty fucking useful.
Do you mind me asking what tools you used?
I mainly used X-Ways Forensics (Winhex) coupled with a bunch of other apps to assist me such as TestDisk to help identify partition metadata and a bunch more smaller apps and scripts for miscellaneous stuff that came along the way. Putting fragmented files back together may rank as the most annoying task ever in data recovery.



![[+]](https://sinister.li/images/modern/collapse_collapsed.png)