2009

Top 10 Data Recovery Bloopers

1. People Are the Problem, Not Technology Disk drives today are typically reliable – human beings aren’t. A recent study found that approximately 15 percent of all unplanned downtime occurs because of human error. 2. When Worlds Collide The company’s high-level IT executives purchased a “Cadillac” system, without knowing much about it.…

Top 10 Data Recovery Bloopers Read More »

HTML files and Text Files

After all known compound file formats have been carved, their sectors are bookmarked and removed from consideration as possibly belonging to text, HTML or any other files.  Using the “gather text” feature of X-Ways Forensics (or similar feature from a variety of existing forensic tools), text was extracted from the remaining sectors not bookmarked.…

HTML files and Text Files Read More »

JPEG Files

Next we will look at carving JPEG graphic files, as specified in the document “Description of Exif file format.” For complete details of the file format specification, please refer to the hyperlink to the document, listed on page 1 of this paper.…

JPEG Files Read More »

MS Compound Document Files

(Includes documents, spreadsheets, templates and other MS office files) Next we will look at carving MS Compound Document (and spreadsheet) files, as specified in the document “Open Office.org’s Documentation of the Microsoft Compound Document File Format.” For complete details of the file format specification, please refer to the hyperlink to the document, listed on page 1 of this paper.…

MS Compound Document Files Read More »

Zip Files

The first compound file format that we will look are Zip files, as specified in the document “APPNOTE.TXT – .ZIP File Format Specification”, revision date January 6, 2006 from PKWARE,Inc. For complete details of the file format specification, please refer to the hyperlink to the document, listed on page 1. …

Zip Files Read More »

Scroll to Top