by admin-jon | Aug 25, 2008 | Blog, Data Recovery
There are three common scenarios in which you may want to recover deleted images: Images accessed from web sites Images downloaded by a user or obtained through file sharing applications Photos stored on a computer hard drive, camera or memory card During a computer...
by admin-jon | Aug 20, 2008 | Blog, Data Recovery, File Header, Software
Carving files, which can be performed manually or through an automated process, permits the recovery of a portion of a corrupted or deleted file. During a computer investigation, examiners may encounter deleted files that cannot be fully recovered. However, enough of...
by admin-jon | Aug 5, 2008 | Blog, Data Recovery, Tips & Tricks
To recover deleted files, user activity logs, Internet history, and other potentially relevant custodian information, a ‘physical’ copy or forensic image of the hard drive or other media is required. Creating a physical copy or forensic image preserves the...
by admin-jon | Aug 5, 2008 | Blog, Data Recovery
It often comes as a shock to attorneys and their staff when they hear that electronic discovery processing doesn’t automatically search the entire contents of a custodian’s hard drive. So, it’s worth stating again for emphasis here. Common electronic discovery...
by admin-jon | Aug 5, 2008 | Blog, Data Recovery
In my last post, I pointed out that in the case of the BTK killer in Kansas, investigators recovered a deleted Microsoft Office document that contained evidence crucial to the case. There are still many litigation support professionals who don’t thoroughly...