Personal computer forensics, also called cyber forensics, is the application of laptop or computer investigation and analysis methods to gather evidence suitable for presentation in a court of law. The objective of laptop or computer forensics is to perform a structured investigation whilst maintaining a documented chain of evidence to find out specifically what happened on a pc and who was responsible for it. A computer can be the target of the crime, it can be the instrument of the crime, or it can serve as an evidence repository storing valuable info about the crime. Moreover the difficult disk is the core carrier of all important info. In some sense, difficult disk is a very precise micro-laptop or computer. Only with the typical running of the micro-pc, can we access to the OS,

If the difficult drive which is corrupt / impossible to image, can you get the testimony from it? Do you want to know the solutions? SalvationDATA – the world’s renowned data recovery remedy provider is proper here for you.

The factors which cause data loss

1. Logical Malfunctions:
• Accidental Disk Format
• File Deletion
• Partition loss or corruption
• Lost or Missing files and folders
• Re-formatted or re-partitioned drive

2. Physically Malfunctions:
• PCB malfunction
• Motor/bearing failure
• Parking element failure
• Platter surface scratch
• Head Dilemma
• FW dilemma
• Circuit difficulty

For the logical information loss, you can use several information recovery program, such as Final Data, GetDataBack, EasyRecovery and etc. However, there is no firm who offers overall solution for both logical and physical information loss, except SalvationDATA Technology LLC.

How SalvationDATA can assist you to solve the difficulties:
1. To the Logical Disk Crash issues, Data Compass has built in DCEXP software program which is utilized for logical information recovery.

The primary characteristics of DCEXP:

1. Adopt “Layered Scan Technology”, maximally save time from data recovery
2. Quick and efficiently extract specified user files
three. Imaging: during the data recovery, it enables users to image information totally from the source drive, partition, or any LBA location. As a target, it can reach far to files, or disk. There are also some handy functions like quickly clockwise, quickly reverse, precise clockwise and exact reverse for example. Meanwhile, it can also permit recovering data quickly and efficiently from any bit of information via “Bitmap Technology”
4. Reflect real-time situation of data imaging, which present direct views for the entire drive information recovery progress rate
five. Real-time quickly statistics of the imaging task
6. Preserve high success rate of restoring recoverable information by file correction algorithm.

2. To the Physically Bad Tough Disk issues:
PCBA malfunction: (including PCBA damaged, ROM damaged or other chip damaged), we normally changed the PCBA with identical donor difficult drive.

Motor/bearing failure: You can exchange the platters and head stack to the difficult drive which has excellent motor/bearing by making use of HD HPE PRO. You just need to uncover the identical donor hard drive.

Parking element failure: Exchange the failed head stack with a donor tough drive by utilizing HD HPE PRO.

Platter surface scratch: Poor sectors are a common issue we faced in the course of conventional imaging. It will cause system death, HD irresponsive, even directly destroyed in the course of image method. Information Compass possesses the super solving capability for bad sectors. Information Compass intelligent poor sector leap function and Dynamic Balanced Enhanced Read technology can aid you retrieve the data from partially damaged poor sectors which can’t be copied/imaged by other tools. And also Data Compass has the professional remedy – High Efficiency Power Supply System towards the problems which caused by significant physical bad sectors. When the head reads the bad sectors areas, the tough disk’s control section will automatically boost the electric output of the head power supply and extract the utmost information.

Head Difficulty:

1) The head stack is completely damaged: You need to swap the head stack with a donor hard drive by using HD HPE PRO.

2) Unstable/weak head stack: Data Compass High Efficiency Power Supply System also can give you a big aid on this part. It can improve the head’s read and write ability to the utmost limit of the style, in order to get the information. You don’t need to risk swapping the head stack for this kind of disks, cutting the price remarkably.

With new built-in technique of image by head, it can create image from the excellent heads without employing bad ones. Soon after that, we can replace with very good compatible head stack and read the unreached area which belongs to the range of poor head. Thus, it can make best use of the Head Resource.

FW difficulty:

HD Doctor Suite can support you repair the damaged firmware or the firmware module disorder. Now our HD Doctor Suite can support the IBM/Hitachi, Seagate, Maxtor and Western Digital challenging drives.

Information Compass simulates a “SA” of HD and boot the source disk and access the user data in other words, you don’t want to repair the SA initial when there are firmware corruption. Now this technologies only supports the IBM/Hitachi challenging drives. We will add Seagate, Maxtor, WD and other manufacturer challenging drives inside this device in the future.

Also we use the Hot Swap PCBA Technologies to deal with some firmware dilemma nevertheless, it can’t be utilized to all the challenging drives. Both HD Doctor Suite and Information Compass have the function – hot swap PCB (Please refer the case study: http://www.salvationdata.com/downloads/pdf/dccase-fast-information-recovery-using-HOT-SWAP-trick.pdf)

Circuit dilemma: You can judge the dilemma by the circuit monitor of the HD Doctor Suite.

We also headache to encounter the criminals lock their drive by password and we can not even access his system. HD Doctor Suite can thoroughly and successfully solve this type of difficulty.

Information Compass also has the Safe Write Protect System: Write Blocking to protect the intactness of source information to avoid the accidental mistaken operation.

SalvationDATA can be the very good assistant on your Computer Forensics work.

For far more details, please contact us at:

SalvationDATA America Continent Dept.
Internet: http://www.diskdatarecoverytools.com/
Add: 601 Analysis Institute of Computer Application, Chinese Academy of Science Chengdu Branch, Sichuan, 610041 China
Direct Phone: (0086) 28 68599758
Fax: (0086) 28 68107757
E-mail:usinfo@salvationdata.com