Hard Drive Data Recovery in Denver Area

Hard Drive Data Recovery in Denver AreaLooking for a professional data recovery service in Denver area? Here is a collection of recovery companies for your referance:

Note: Before you decide to take our disc drives to these companies for a recovery service, you can do something ourself to have a general hard drive diagnoses to reduce the expensive recovery cost. Please refer to this post: Data Recovery User Guide – Through Data Recovery Software

Hard Drive Data Recovery Denver:

DataTech Labs
www.datatechlab.com
8000 E. Quincy Ave., Suite 300, Denver
(303) 770-3282

Sector Logics Data Recovery
www.sectorlogics.com
600 17th St, Ste 2800, Denver
1-866-804-1914

Data Recovery Link
www.datarecoverylink.com
1780 South Bellaire Street #355, Denver
(303) 649-1181

ADR Data Recovery
www.adrdatarecovery.com
999 18th Street #2700, Denver
(303) 895-3844

Digital Medix
www.digitalmedix.com
8000 E. Quincy Ave #300, Denver
(303) 730-0555

If you are living in Denver area maybe you have heard about one or some all of them, they are all top-customer-reviews recovery companies that can help you so much. If you also know other companies can provide professional recovery services please feel free to contact me, I can list them here in time. Thank you!

Read More

Seagate 100466824 Barracuda 7200.11 PCB

Swap 100466824 Seagate Barracuda 7200.11 PCB(Printed Circuit Boards) to recover your data from damaged HDD due to PCB failure. 100466824 is the board number on this PCB. If your HDD’s PCB has problems, the drive usually cannot boot up or there may be an inaccurate display in the BIOS of the hard drive’s information. Also power may not get to the hard drive and as a result it will not spin up.

Seagate 100466824 Barracuda 7200.11 PCB Board Details:

Board Number: 100466824
Main Controller IC: TTB5501D
Motor Combo IC: 100439116
Series: Seagate Barracuda 7200.11

Note: Hard drive failures are NOT always caused by circuit board failure.

Swap Seagate 100466824 Barracuda 11 PCB will not solve the problem below:

1. The hard drive will power up normally (no ticking noises, errors etc) but will not be recognized by the computer;
2. The hard drive will power up normally and be recognized correctly but will report a size of 0 bytes;
3. The hard drive will power up but report SMART errors on boot;

100466824 Seagate Barracuda 7200.11 PCB Photos:

Seagate 100466824 Barracuda 7200.11 PCB

Order Online: Seagate 100466824 Barracuda 7200.11 PCB

Read More

Data Backup Terminology

Data Backup Terminologybackup policy
an organisation’s procedures and rules for ensuring that adequate amounts and types of backups are made, including suitably frequent testing of the process for restoring the original production system from the backup copies.

backup rotation scheme
a method for effectively backing up data where multiple media are systematically moved from storage to usage in the backup process and back to storage. There are several different schemes. Each takes a different approach to balance the need for a long retention period with frequently backing up changes. Some schemes are more complicated than others.

backup site
a place where business can continue after a data loss event. Such a site may have ready access to the backups or possibly even a continuously updated mirror.

backup software
computer software applications that are used for performing the backing up of data, i.e., the systematic generation of backup copies.

backup window
the period of time that a system is available to perform a backup procedure. Backup procedures can have detrimental effects to system and network performance, sometimes requiring the primary use of the system to be suspended. These effects can be mitigated by arranging a backup window with the users or owners of the system(s).

copy backup
backs up the selected files, but does not mark the files as backed up (reset the archive bit). This is found in the backup with Windows 2003.

cumulative incremental backup
a differential backup used by NetBackup.

daily backup
incremental backup used by Windows Server 2003.

data salvage
the process of recovering data from storage devices when the normal operational methods are impossible. This process is typically performed by specialists in controlled environments with special tools. For example, a crashed hard disk may still have data on it even though it doesn’t work properly. A data salvage specialist might be able to recover much of the original data by opening it up in a clean room and tinkering with the internal parts.

differential backup
a cumulative backup of all changes made since the last full backup. The advantage to this is the quicker recovery time, requiring only a full backup and the latest differential backup to restore the system. The disadvantage is that for each day elapsed since the last full backup, more data needs to be backed up, especially if a majority of the data has been changed.

differential incremental backup
an incremental backup used by NetBackup.

disaster recovery
the process of recovering after a business disaster and restoring or recreating data. One of the main purposes of creating backups is to facilitate a successful disaster recovery. For maximum effectiveness, this process should be planned in advance and audited.

disk image
a method of backing up a whole disk or filesystem in a single image. Since the underlying data structures are what is actually backed up, this method does not allow for file level control over what is selected for backup or restore.

FlashBackup
a term used for raw partition backup used by NetBackup Advanced Client. In NBAC, support is limited to the VxFS (Veritas), ufs (Solaris), Online JFS (HP-UX), and NTFS (Windows) filesystem types. Similar to the UNIX utility dump.

full backup
a backup of all (selected) files on the system. In contrast to a drive image, this does not included the file allocation tables, partition structure and boot sectors.

hot backup
a backup of a database that is still running, and so changes may be made to the data while it is being backed up. Some database engines keep a record of all entries changed, including the complete new value. This can be used to resolve changes made during the backup.

incremental backup
a backup that only contains the files that have changed since the most recent backup (either full or incremental). The advantage of this is quicker backup times, as only changed files need to be saved. The disadvantage is longer recovery times, as the latest full backup, and all incremental backups up to the date of data loss need to be restored.

media spanning
sometimes a backup job is larger than a single destination storage medium. In this case, the job must be broken up into fragments that can be distributed across multiple storage media.

multiplexing
the practice of combining multiple backup data streams into a single stream that can be written to a single storage device. For example, backing up 4 PCs to a single tape drive at once.

multistreaming
the practice of creating multiple backup data streams from a single system to multiple storage devices. For example, backing up a single database to 4 tape drives at once.

normal backup
full backup used by Windows Server 2003.

near store
provisionally backing up data to a local staging backup device, possibly for later archival backup to a remote store device.

open file backup
the ability to back up a file while it is in use by another application. See File locking.

remote store
backing up data to an offsite permanent backup facility, either directly from the live data source or else from an intermediate near store device.

restore time
the amount of time required to bring a desired data set back from the backup media.

retention time
the amount of time in which a given set of data will remain available for restore. Some backup products rely on daily copies of data and measure retention in terms of days. Others retain a number of copies of data changes regardless of the amount of time.

site-to-site backup
backup, over the internet, to an offsite location under the user’s control. Similar to remote backup except that the owner of the data maintains control of the storage location.

synthetic backup
a term used by NetBackup for a restorable backup image that is synthesized on the backup server from a previous full backup and all the incremental backups since then. It is equivalent to what a full backup would be if it were taken at the time of the last incremental backup.

tape library
a storage device which contains tape drives, slots to hold tape cartridges, a barcode reader to identify tape cartridges and an automated method for physically moving tapes within the device. These devices can store immense amounts of data.

true image restore
a term used by NetBackup and Backup Exec for the collection of file deletion and file movement records so that an accurate restore can be performed. For instance, consider a system that has a directory with 5 documents in it on Friday. On Saturday, the system gets a full backup that includes those 5 documents. On Monday, the owner of those documents deletes 2 of them and updates 1 of the 3 remaining. That updated document gets backed up as part of The Monday night incremental backup. On Tuesday afternoon the system crashes. If we perform a normal restore of the full backup from Saturday and the incremental backup from Monday to the fresh system, we will have restored the 2 documents that were intentionally deleted. True image restore keeps track of the deletions with each incremental backup and prevents the deleted files from being inappropriately restored.

trusted paper key
a machine-readable print of a cryptographic key.

virtual Tape Library (VTL)
a storage device that appears to be a tape library to backup software, but actually stores data by some other means. A VTL can be configured as a temporary storage location before data is actually sent to real tapes or it can be the final storage location itself.

Read More

WD 2060-701590-000 PCB

Swap 2060-701590-000 WD PCB(Printed Circuit Boards) to recover your data from damaged HDD due to PCB failure. 2060-701590-000 is the board number on this PCB. If your HDD’s PCB has problems, the drive usually cannot boot up or there may be an inaccurate display in the BIOS of the hard drive’s information. Also power may not get to the hard drive and as a result it will not spin up.

2060-701590-000 WD PCB Board Details:

Board Number: 2060-701590-000
Main Controller IC: 88i8846-TFJ2
HDD Motor Combo IC: L7251 3.1
Manufacturer: Western Digital

Note: Hard drive failures are NOT always caused by circuit board failure.

Swap 2060-701590-000 WD PCB will not solve the problem below:

1. The hard drive will power up normally (no ticking noises, errors etc) but will not be recognized by the computer;
2. The hard drive will power up normally and be recognized correctly but will report a size of 0 bytes;
3. The hard drive will power up but report SMART errors on boot;

WD 2060-701590-000 PCB Photos:

WD 2060-701590-000 PCB

Order Online: Western Digital 2060-701590-000 PCB

Read More

Hard Drive Data Recovery in Chicago Area

Hard Drive Data Recovery in Chicago AreaLooking for a professional data recovery service in Chicago area? Here is a collection of recovery companies for your referance:

Note: Before you decide to take our disc drives to these companies for a recovery service, you can do something ourself to have a general hard drive diagnoses to reduce the expensive recovery cost. Please refer to this post: Data Recovery User Guide – Through Data Recovery Software

Hard Drive Data Recovery Chicago Texas:

ADR Data Recovery
Website: www.adrdatarecovery.com
Address: 200 South Wacker Drive #3100 Chicago, IL
Tel: (312) 674-4710

Secure Data Recovery
Website: www.securedatarecovery.com
Address: 500 North Michigan Avenue # 300 Chicago, IL
Tel: (312) 854-2845

Data Retrieval
Website: www.dataretrieval.com
Address: 401 North Michigan Avenue Chicago, IL
Tel: (312) 878-0921

Data Recovery Chicago
Website: datarecoverychicago.us
Address: 161 North Clark Street Chicago, IL 60601
Tel: (312) 626-2806

Computer labs USA Chicago
Website: computerlabsusa.com
Address: 6141 West Touhy Avenue Chicago, IL 60646
Tel: (847) 227-8882

Data Recovery in Chicago
Website: datarecoveryinchicago.net
Address: 1 West Wacker Drive #4628 Chicago, IL 60601-2006
Tel: (312) 945-7335

If you are living in chicago area maybe you have heard about one or some all of them, they are all top-customer-reviews recovery companies that can help you so much. If you also know other companies can provide professional recovery services please feel free to contact me, I can list them here in time. Thank you!

Read More

100466725 Seagate Barracuda 11 PCB

Swap 100466725 Seagate Barracuda 11 PCB(Printed Circuit Boards) to recover your data from damaged HDD due to PCB failure. 100466725 is the board number on this PCB. If your HDD’s PCB has problems, the drive usually cannot boot up or there may be an inaccurate display in the BIOS of the hard drive’s information. Also power may not get to the hard drive and as a result it will not spin up.

PCB Board Details:

Name: ST3500320AS
Board Number: 100466725
Main Controller IC: TTB5501C
Motor Combo IC: 100369972
Manufacturer: Seagate

Note: Hard drive failures are NOT always caused by circuit board failure.

Swap Seagate 100466725 Barracuda 11 PCB will not solve the problem below:

1. The hard drive will power up normally (no ticking noises, errors etc) but will not be recognized by the computer;
2. The hard drive will power up normally and be recognized correctly but will report a size of 0 bytes;
3. The hard drive will power up but report SMART errors on boot;

Seagate 100466725 Barracuda 11 PCB Photos:

100466725 Seagate Barracuda 11 PCB

Order Online: Seagate 100466725 Barracuda 11 PCB

Read More

Seagate Unveils the First Hard Disk Drive Featuring 1 TB Per Platter

Seagate Unveils The World's First Hard Drive Featuring 1 TB Per PlatterMay 3, 2011 – Seagate Technology LLC unveiled the world’s first 3.5-inch hard disk drive featuring 1TB of storage capacity per disk platter, breaking the 1TB areal density barrier to help meet explosive worldwide demand for digital content storage in both home and office.

Seagate Barracuda XT 3TB Hard Disk Drive

Seagate’s GoFlex Desk products are the first to feature the new hard disk drive, delivering storage capacities of up to 3TB and an areal density of 625 Gigabits per square inch, the industry’s highest. Seagate is on track to ship its flagship 3.5-inch Barracuda desktop hard disk drive with 3TBs of storage on 3 disk platters – which can provide enough capacity to store up to 120 high-definition movies, 1,500 video games, thousands of photos or virtually countless hours of digital music – to the distribution channel in mid-2011. The hard drive will also be available in capacities of 2TB, 1.5TB and 1TB.

“Organizations of all sizes and consumers worldwide are amassing digital content at light speed, generating immense demand for storage of digital content of every imaginable kind, we remain keenly focused on delivering the storage capacity, speed and manageability our customers need to thrive in an increasingly digital world.” – said Rocky Pimentel, Seagate Executive Vice President of Worldwide Sales and Marketing.

GoFlex Desk external hard drives are compatible with both the Windows® and Mac® computers. Each drive includes an NTFS driver for Mac, which allows the drive to store and access files from both Windows and Mac OS X computers without reformatting. The GoFlex Desk external drive’s sleek black 3.5-inch design sits either vertically or horizontally to accommodate any desktop environment.

Read More

Types of Computer File Systems

Types of Computer File SystemsFile system types can be classified into disk file systems, network file systems and special purpose file systems.

1. Disk File Systems:

a) Disk file systems
A disk file system is a file system designed for the storage of files on a data storage device, most commonly a disk drive, which might be directly or indirectly connected to the computer. Examples of disk file systems include FAT (FAT12, FAT16, FAT32, exFAT), NTFS, HFS and HFS+, HPFS, UFS, ext2, ext3, ext4, btrfs, ISO 9660, ODS-5, Veritas File System, VMFS, ZFS, ReiserFS and UDF. Some disk file systems are journaling file systems or versioning file systems.

b) Optical discs
ISO 9660 and Universal Disk Format (UDF) are the two most common formats that target Compact Discs, DVDs and Blu-ray discs. Mount Rainier is a newer extension to UDF supported by Linux 2.6 series and Windows Vista that facilitates rewriting to DVDs in the same fashion as has been possible with floppy disks.

c) Flash file systems
A flash file system is a file system designed for storing files on flash memory devices. These are becoming more prevalent as the number of mobile devices is increasing, and the capacity of flash memories increase.

While a disk file system can be used on a flash device, this is suboptimal for several reasons:

a) Erasing blocks: Flash memory blocks have to be explicitly erased before they can be rewritten. The time taken to erase blocks can be significant, thus it is beneficial to erase unused blocks while the device is idle.
b) Random access: Disk file systems are optimized to avoid disk seeks whenever possible, due to the high cost of seeking. Flash memory devices impose no seek latency.
c) Wear levelling: Flash memory devices tend to wear out when a single block is repeatedly overwritten; flash file systems are designed to spread out writes evenly.

d) Tape file systems
A tape file system is a file system and tape format designed to store files on tape in a self-describing form. Magnetic tapes are sequential storage media with significantly longer random data access times than disks, posing challenges to the creation and efficient management of a general-purpose file system.

In a disk file system there is typically a master file directory, and a map of used and free data regions. Any file additions, changes, or removals require updating the directory and the used/free maps. Random access to data regions is measured in milliseconds so this system works well for disks.

However, tape requires linear motion to wind and unwind potentially very long reels of media, and this tape motion may take several seconds to several minutes to move the read/write head from one end of the tape to the other.

Consequently, a master file directory and usage map can extremely slow and inefficient with tape. Writing typically involves reading the block usage map to find free blocks for writing, updating the usage map and directory to add the data, and then advancing the tape to write the data in the correct spot. Each additional file write requires updating the map and directory and writing the data, which may take several seconds to occur for each file.

Tape file systems instead typically allow for the file directory to be spread across the tape intermixed with the data, referred to as streaming, so that time-consuming and repeated tape motions are not required to write new data.

However a side effect of this design is that reading the file directory of a tape usually requires scanning the entire tape to read all the scattered directory entries. Most data archiving software that works with tape storage will store a local copy of the tape catalog on a disk file system, so that adding files to a tape can be done quickly without having to rescan the tape media. The local tape catalog copy is usually discarded if not used for a specified period of time, at which point the tape must be re-scanned if it is to be used in the future.

IBM has developed a file system for tape called the Linear Tape File System. The IBM implementation of this file system has been released as the open-source IBM Linear Tape File System — Single Drive Edition (LTFS—SDE) product. The Linear Tape File System uses a separate partition on the tape to record the index meta-data thereby avoiding the problems associated with scattering directory entries across the entire tape.
Tape formatting

Writing data to a tape is often a significantly time-consuming process that may take several hours. Similarly, completely erasing or formatting a tape can also take several hours. With many data tape technologies it is not necessary to format the tape before over-writing new data to the tape. This is due to the inherently destructive nature of overwriting data on sequential media.

Because of the time it can take to format a tape, typically tapes are pre-formatted so that the tape user does not need to spend time preparing each new tape for use. All that is usually necessary is to write an identifying media label to the tape before use, and even this can be automatically written by software when a new tape is used for the first time.

e) Database file systems

A recent concept for file management is the idea of a database-based file system. Instead of, or in addition to, hierarchical structured management, files are identified by their characteristics, like type of file, topic, author, or similar metadata.

f) Shared disk file systems
A shared disk file system is one in which a number of machines (usually servers) all have access to the same external disk subsystem (usually a SAN). The file system arbitrates access to that subsystem, preventing write collisions. Examples include GFS from Red Hat, GPFS from IBM, and SFS from DataPlow.

2. Network file systems

A network file system is a file system that acts as a client for a remote file access protocol, providing access to files on a server. Examples of network file systems include clients for the NFS, AFS, SMB protocols, and file-system-like clients for FTP and WebDAV.

3. Special purpose file systems

A special purpose file system is basically any file system that is not a disk file system or network file system. This includes systems where the files are arranged dynamically by software, intended for such purposes as communication between computer processes or temporary file space.

Special purpose file systems are most commonly used by file-centric operating systems such as Unix. Examples include the procfs (/proc) file system used by some Unix variants, which grants access to information about processes and other operating system features.

Deep space science exploration craft, like Voyager I and II used digital tape-based special file systems. Most modern space exploration craft like Cassini-Huygens used Real-time operating system file systems or RTOS influenced file systems. The Mars Rovers are one such example of an RTOS file system, important in this case because they are implemented in flash memory.

Read More

Computer Forensics Degrees Online: Colleges & Programs

Interested in get degrees in computer forensics online? Find computer forensic degrees online offering top accredited Computer Forensics programs, courses and classes Computer Forensics field. Easily find and compare these online Computer Forensics majors, Computer Forensics colleges, and programs.

Top Computer Forensics Colleges

Computer Forensics College: Ashford University
Computer Forensics Program: BA/Social and Criminal Justice – Forensics

Top Computer Forensics Colleges

Augment your Bachelor of Arts in Social and Criminal Justice degree with a specialization in Forensics. Examine and understand principles of criminal liability and the acts, mental state, and attendant circumstances that are central ingredients in crimes against society, persons, or property.

Computer Forensics College: American InterContinental University
Computer Forensics Program: Bachelor’s of Science in Criminal Justice – Forensic Science

Top Computer Forensics Colleges

The Bachelor’s of Science in Criminal Justice with a concentration in Forensic Science is for those students interested in career opportunities like Crime Scene Analyst, Non-Sworn Forensic Personnel and many others. The courses provide clear explanations of the techniques, abilities and limitations within the field of forensic science and its applications to criminal investigations.

Computer Forensics College: Loyola University New Orleans Online
Computer Forensics Program: Master of Science in Criminal Justice Administration – Forensic Science Administration

Loyola University New Orleans now offers an online Master of Science in Criminal Justice Administration (MSCJA) degree program. Designed in response to a growing need for criminal justice experts, Loyola’s MSCJA appeals to both public and private practitioners already working in the field. Long-term trends indicate modern public law enforcement agencies and corporate governance and security entities employ many of the same concepts, skills, and frameworks. Our MSCJA takes into account the needs and demands in both sectors and provides an overview of the foremost scientific knowledge, legal cases, administrative and management practices, and technical innovations employed in the public and private sectors.

Computer Forensics College: Kaplan University
Computer Forensics Programs:

BS in Criminal Justice – Crime Scene Investigation

Learn techniques of locating, collecting, and analyzing crime scene evidence used in courts of law. Identify boundaries of a crime scene and understand the principles of searching the crime scene for specific types of evidence, identifiable forensic material, and other items of evidentiary value. As a graduate, you may qualify for a crime investigation position in a law enforcement organization.

BS in Criminal Justice – Forensic Psychology

If you are seeking to advance your criminal justice career in law enforcement, private security, or corrections or to pursue entry-level opportunities, the Bachelor of Science in Criminal Justice program will help you meet your career goals. This degree provides students with a solid foundation in criminal justice and a broad liberal arts knowledge base. The baccalaureate program is designed to combine the professional skills of various specialized areas of criminal justice with research and analytical skills. Graduates of this program can seek employment opportunities in various criminal justice environments, such as law enforcement, corrections, probation, parole, or juvenile justice facilities.

Computer Forensics College: Ashworth College
Computer Forensics Program: Forensic Science

This fascinating course shows you how to identify, collect and analyze evidence for use in capturing criminal perpetrators. We’ll take you from the crime scene to the laboratory to the courtroom. You’ll learn the step by step procedures for analyzing hair, fiber, fingerprints, chemicals and blood stains; testing for drugs and alcohol; examining DNA samples and much more. You’ll also learn how to use specialized forensic equipment, reconstruct a crime scene and prepare a lab report for presentation in court.

Computer Forensics College: Brookline College
Computer Forensics Programs:

Associate of Science in Digital Forensics and Investigation Online

Digital Forensics is a branch of forensic science that pertains to legal evidence found in, or relating to, computers and electronic communication, information, or storage devices as well as the Internet. This program prepares the student to advance in careers paths in government, private, corporate, or entrepreneurial sectors by continuing to develop knowledge and skills in technology, investigative techniques, and communications.

Bachelor of Science in Digital Forensics and Investigation
Digital Forensics is a branch of forensic science that pertains to legal evidence found in, or relating to, computers and electronic communication, information, or storage devices as well as the Internet. This program prepares the student to advance in careers paths in government, private, corporate, or entrepreneurial sectors by continuing to develop knowledge and skills in technology, investigative techniques, and communications.

Computer Forensics College: Grantham University
Computer Forensics Program: Certificate of Learning Computer Forensic Investigations

Grantham UniversityÂ’s Criminal Justice Certificates of Learning offer structured courses, so that a student can gain experience and learning in the field of their choosing. The objectives are for a well-rounded student who strives to gain an advantage in a specialty area to spark interest and understanding of University topics in criminal justice. Grantham University offers Certificates of Learning in: Emergency Operations Management, Computer Forensic Investigations, Juvenile Justice and Criminal Investigation.

Welcome to review these most popular colleges providing Computer Forensics degree online and request details from the colleges you like best.

Read More

List of Computer Forensics Tools

Computer Forensics Tools

what is computer forensics?

Computer forensics is a branch of digital forensic science pertaining to legal evidence found in computers and digital storage media. The goal of computer forensics is to examine digital media in a forensically sound manner with the aim of identifying, preserving, recovering, analyzing and presenting facts and opinions about the information. With these useful forensics tools we can finish this work shortly and accurately.

A) List of tools for computer forensics

1. SANS Investigative Forensics Toolkit – SIFT (GPL V2.0)
Multi-purpose forensic operating system
computer-forensics.sans.org

2. EnCase (Windows, commercial, V6.18)
Multi-purpose forensic tool
www.guidancesoftware.com

3. FTK (Windows, commercial, V3.2)
Multi-purpose tool, commonly used to index acquired media.
accessdata.com/products/forensic-investigation/ftk

4. PTK Forensics (LAMP, free/commercial, V2.0)
GUI for The Sleuth Kit
sourceforge.net/projects/ptk-forensics/

5. The Coroner’s Toolkit (Unix-like, IBM Public License, V1.19)
A suite of programs for Unix analysis
www.porcupine.org/forensics/tct.html

6. COFEE (Windows,Proprietary)
A suite of tools for Windows developed by Microsoft, only available to law enforcement
cofee.nw3c.org

7. The Sleuth Kit (Unix-like/Windows, IPL, CPL, GPL, V3.1.1)
A library of tools for both Unix and Windows
www.sleuthkit.org

8. Categoriser 4 Pictures (Windows, Free, V4.0.2)
Image categorisation tool develop, available to law enforcement

9. Paraben P2 Commander (Windows, Commercial)
General purpose forensic tool

10. Open Computer Forensics Architecture (Linux, LGPL/GPL, 2.3.0)
Computer forensics framework for CF-Lab environment

11. SafeBack (commercial, V3.0)
Digital media (evidence) acquisition and backup

12. Forensic Assistant (Windows, commercial, V1.2)
User activity analyzer(E-mail, IM, Docs, Browsers), plus set of forensics tools

B) Tools for Mobile device forensics

Mobile forensics tools tend to consist of both a hardware and software component.

1. Cellebrite Mobile Forensics (Windows, Commercial)
Univarsal Forensics Extraction Device – Hardware and Software

2. Radio Tactics Aceso (Windows, Commercial)
“All-in-one” unit with a touch screen

3. Paraben Device Seizure (Windows, Commercial)
Hardware/Software package

4. MicroSystemation .XRY/.XACT (Windows, Commercial)
Hardware/Software package, specialises in deleted data

5. Oxygen Phone Manager (Commercial)

C) Other computer forensics tools

1. HashKeeper (Windows, free)
Database application for storing file hash signatures

2. Evidence Eliminator (Windows, commercial, V6.03)
Anti-forensics software, claims to delete files securely

3. DECAF (Windows, free)
Tool which automatically executes a set of user defined actions on detecting MS’s COFEE tool

Read More