How Salvationdata Can Assist You On Computer Forensics

Computer forensics, also called cyber forensics, is the application of computer investigation and analysis techniques to gather evidence suitable for presentation in a court of law. The goal of computer forensics is to perform a structured investigation while maintaining a documented chain of evidence to find out exactly what happened on a computer and who was responsible for it. A computer can be the target of the crime, it can be the instrument of the crime, or it can serve as an evidence repository storing valuable information about the crime. Moreover the hard disk is the core carrier of all important information. In some sense, hard disk is a very precise micro-computer. Only with the normal running of the micro-computer, can we access to the OS,

If the hard drive which is corrupt / impossible to image, can you get the testimony from it? Do you want to know the solutions? SalvationDATA – the world’s famous data recovery solution provider is right here for you.

The reasons which cause data loss

1. Logical Malfunctions:
• Accidental Disk Format
• File Deletion
• Partition loss or corruption
• Lost or Missing files and folders
• Re-formatted or re-partitioned drive

2. Physically Malfunctions:
• PCB malfunction
• Motor/bearing failure
• Parking element failure
• Platter surface scratch
• Head Problem
• FW problem
• Circuit problem

For the logical data loss, you can use many data recovery program, such as Final Data, GetDataBack, EasyRecovery and etc. However, there is no company who provides overall solution for both logical and physical data loss, except SalvationDATA Technology LLC.

How SalvationDATA can assist you to solve the problems:
1. To the Logical Disk Crash problems, Data Compass has built in DCEXP software which is used for logical data recovery.

The main features of DCEXP:

1. Adopt "Layered Scan Technology", maximally save time from data recovery;
2. Fast and effectively extract specified user files;
3. Imaging: during the data recovery, it allows users to image data fully from the source drive, partition, or any LBA area. As a target, it can reach far to files, or disk. There are also some handy functions like fast clockwise, fast reverse, exact clockwise and exact reverse for example. Meanwhile, it can also allow recovering data fast and effectively from any bit of data via "Bitmap Technology";
4. Reflect real-time situation of data imaging, which provide direct views for the whole drive data recovery progress rate;
5. Real-time fast statistics of the imaging task;
6. Maintain high success rate of restoring recoverable data by file correction algorithm.

2. To the Physically Bad Hard Disk problems:
PCBA malfunction: (including PCBA damaged, ROM damaged or other chip damaged), we usually changed the PCBA with identical donor hard drive.

Motor/bearing failure: You can exchange the platters and head stack to the hard drive which has good motor/bearing by using HD HPE PRO. You just need to find the identical donor hard drive.

Parking element failure: Exchange the failed head stack with a donor hard drive by using HD HPE PRO.

Platter surface scratch: Bad sectors are a common problem we faced during traditional imaging. It will cause system death, HD irresponsive, even directly destroyed during image process. Data Compass possesses the super solving ability for bad sectors. Data Compass intelligent bad sector leap function and Dynamic Balanced Enhanced Read technology can help you retrieve the data from partially damaged bad sectors which can’t be copied/imaged by other tools. And also Data Compass has the professional solution – High Efficiency Power Supply System towards the problems which caused by serious physical bad sectors. When the head reads the bad sectors areas, the hard disk’s control section will automatically increase the electric output of the head power supply and extract the utmost data.

Head Problem:

1) The head stack is totally damaged: You should swap the head stack with a donor hard drive by using HD HPE PRO.

2) Unstable/weak head stack: Data Compass High Efficiency Power Supply System also can give you a big help on this part. It can enhance the head’s read and write ability to the utmost limit of the design, in order to get the data. You don’t need to risk swapping the head stack for this kind of disks, cutting the cost remarkably.

With new built-in technique of image by head, it can create image from the good heads without using bad ones. After that, we can replace with good compatible head stack and read the unreached area which belongs to the range of bad head. Thus, it can make best use of the Head Resource.

FW problem:

HD Doctor Suite can help you repair the damaged firmware or the firmware module disorder. Now our HD Doctor Suite can support the IBM/Hitachi, Seagate, Maxtor and Western Digital hard drives.

Data Compass simulates a "SA" of HD and boot the source disk and access the user data; in other words, you don’t need to repair the SA first when there are firmware corruption. Now this technology only supports the IBM/Hitachi hard drives. We will add Seagate, Maxtor, WD and other manufacturer hard drives inside this device in the future.

Also we use the Hot Swap PCBA Technology to deal with some firmware problem; however, it can’t be used to all the hard drives. Both HD Doctor Suite and Data Compass have the function - hot swap PCB (Please refer the case study: http://www.salvationdata.com/downloads/pdf/dccase-quick-data-recovery-using-HOT-SWAP-trick.pdf)

Circuit problem: You can judge the problem by the circuit monitor of the HD Doctor Suite.

We also headache to encounter the criminals lock their drive by password and we can not even access his system. HD Doctor Suite can thoroughly and effectively solve this kind of problem.

Data Compass also has the Safe Write Protect System: Write Blocking; to protect the intactness of source data; to prevent the accidental mistaken operation.

SalvationDATA can be the good assistant on your Computer Forensics work.

For more details, please contact us at:

SalvationDATA America Continent Dept.
Web: http://www.diskdatarecoverytools.com/
Add: 601 Research Institute of Computer Application, Chinese Academy of Science Chengdu Branch, Sichuan, 610041 China
Direct Phone: (0086) 28 68599758
Fax: (0086) 28 68107757
Email:usinfo@salvationdata.com