Data Recovery From a Formatted Hard Disk Using EnCase Forensics
This is a school project, our theme was on computer forensics and we decided to recover data from a formatted Hard Disk. Our main objective is to prove that data recovery from a hard disk is possible. It can be used against you as evidence of illegal copyright files such as videos and music. Basically, formatting your drive doesn't erase any thing at all.
expert forensic hdd recovery program use by police, Data Recovery from a Formatted Hard Disk using EnCase Forensics free download, download Data Recovery from a Formatted Hard Disk using EnCase Forensics, encase data recovery, encase forensics data recovery free download
Related Raid Hard Drive Recovery Posts
Data Recovery Category: Raid Hard Drive Recovery Videos
because I'm the sort of person who will pursue such a matter to the maximum possible extent. I'm heartened to learn that you're studying this subject, the sort of cowardly sociopaths who perpetrate computer crime believing that they will get away with it need to be taught a lesson.
There are plenty of free and open source tools you can use to do compute forensics. For example Caine Live, DEFT and SIFT (from sans.org) I've been using caine to recover evidence from several hard drives in my possession that a certain other youtube user has insinuated contain what he termed illegal porn. I have informed the police about this and the forensic work I have done has given me a good idea as to who has been remotely accessing my computers. It's best not to fuck with people like me.
I'll be removing this video soon as i have long completed my project. Got a B grade and thanks everyone for the 10,000 views. its means a lot to me. Hopefully I have answered your questions with my limited knowledge on harddisk recovery.
I would recommend everyone to backup your data many times. Harddisk recovery is for the forensics, not for commercial purposes. If you really need to recover lost data, bring it to the experts.. they deserve your money.. seriously.. =D
@Recon777x We have already done a format using the windows setup way.. the blue screen way.. if you get what i mean.. we were still able to recover PORTION of the data.. but we didn't record down.. as for encrypting, I have not done any research on it so I'm in no position to comment..
About this video: You should have drawn attention to the fact that you did a QUICK FORMAT on the drive, which does not actually delete anything. A complete format will not be recoverable. Likewise, if you use TrueCrypt to encrypt an entire drive (which takes hours) your data will be completely 100% secure from programs like EnCase as long as they don't have your key, which can be any combination of any words and/or files.
@guerocomico estimated 3000 pounds.
how much exactly does this cost to buy it?
@dragonkiller301 na i wouldnt bother to try ill just download them over plus my friend has all the songs that really cant get
so i should be fine
@tigerintermusic damn dude, u can get them back if they were on an ipod i got all mine back
@dragonkiller301 try having to lose about 6000:(((((((((
@aliimalone mail me for that
i accidently formatted my hard drive, there goes my 318 songs
for some reason, i can't post link on youtube. So people google for Encase. go to the website called guidance software. from that website, you have to request for a quotation from the company as EnCase is a program used by the forensic team in the law enforcement unit. So its not exactly a commercial program.
there are 2 versions to this EnCase program. First is the EnCase forensics. second is the so-called "trial" version.. which is known as Encase Enterprise. For Enterprise, you can't fully use this program until you have the USB dongle. which is believe is the case for you. You have to purchase the USB dongle from Encase themselves.
hey, this is a very good way :=) i used a password on my external hard drive today and my hard drive got fucked up, i cant open up, it says please format , i said hell no, i got 290 gb of my music and videos + pictures from my life, i need to get it back, i found this program and bought it, i have waited 5 hours now, its soon finished, all i need to do now is to copy em over to my brand new hard drive, and then i will format the one who fucked this shit up :=)
hey, this is a very good way :=) i used a password on my external hard drive today and my hard drive got fucked up, i cant open up, it says please format , i said hell no, i got 290 gb of my music and videos + pictures from my life, i need to get it back, i found this program and bought it, i have waited 5 hours now, its soon finished, all i need to do now is to copy em over to my brand new hard drive, and then i will format the one who fucked this shit up :=)
After installing this software, I dont see my local drives what do I do now.
mail me for this software
where can i get this software? :O
Like i said, data recovery is not always 100%, it is greatly affected by what you did after formatting.
If you format already but have not put in any data, there is a higher chance of data recovery.
But if you fill up your harddisk again and therefore resetting the binary codes, it is much harder to recover.
It is easier to recover smaller files as they remain intact. Things like videos gets harder as losing a small portion could mean corruption.
is there a way i can recover actual formatted drives with like over 500gb of lost storage thanks to reformated my pc
Well i can't really give you a solution, but i seriously believe that your thumbdrive is somehow faulty. and that lowers the chance of recovering data.
Does this program fix this problem... I was transferring data from one pc to another. Then it seemed I was asked to format the thumbdrive(Centon DataStickPro 8GB). So I did. Now I still can see it in "Mycomputer", but when I click to open it it tells me I need to format it. When I try now it never completes even after hours and has to cancel. Under its properties it shows 0% for used and unused space available. But says it's working properly.
.
Thanx for reply to any smart guru.
There is 2 modes for this program, one is the enterprise version, which is without the USB dongle plugged in, you will only get to browse around the program, you can't use the full function, which includes recovering the partition.
I was just looking at your vid and there's a part where you right click and select recover file...on my program, that option is not available...actually it's not there period. Do you know what's wrong? I reformatted my hard drive recently and I so need to get some important files back!!!