Data recovery blog

I came across a couple of pretty good sites detailing some of the tools and processes I use for data recovery.



Basically this wiki steps you through recovering data via a bootable Linux CD/USB. This wiki recommends RIPLinux, though I personally use SystemRescueCd which is just another bootable Linux distribution designed for data and system recovery.

The utilities which are important are ddrescue, badblocks, and smartctl.  I also use foremost, autopsy, ntfs-3g, ssh/scp, rsync, samba, 7z when doing data recovery work. 

Essentially the first task is to see just what kind of shape the drive is in.  For this we use smartctl to query the drive's S.M.A.R.T. statistics.  These numbers will tell us just how many errors the drive is producing, and can give us an estimate of how much time we have to work with. 

a "smartctl --all /dev/<device>" will print the stats from that particular drive. 

For example, on one of my systems I run the following:

Securely wipe hard drives using linux

Howto securely erase a harddrive .

Simply deleting, formating or zero writing a hard drive is not enough to keep a determined individual from restoring data from a hard drive. To ensure that your data really is deleted use a CD based distribution such as knoppix to boot the computer.

You can either issue the following commands seperated by a semicolon (;) or put them into a script. This is essentially a fire and forget process, but it will take a really long time.

Also, each pattern (writing 0’s, 1s, and random) should be done 4 to 8 times for maximum security.

Syndicate content