In some cases during investigations, it is important to reclaim information that has been lost or hidden due to logical or physical data problems. Logical data problems may consist of recovering files from free space, deleted or formatted partitions, cracking passwords, or bypassing viruses to enable full access to data. After recovery has been performed, it is necessary to analyze the data to reconstruct usage history. By doing so, you can recreate chain of events, user history, internet activity, e-mail communication, or document revisions.
In addition to logical data complications, physical problems such as mechanical damage, scratched surfaces, or broken media can also hinder data access. Physical issues are not only limited to hard disks -- these same problems can occur with optical media, tapes, and various flash memory types.
Data recovery is imperative to comply with fraud investigations and to enable full discovery of all client information. Recovery can be especially important when it is suspected that a user may have reason to hide or delete files. By recovering these files, you are able to reconstruct usage history to piece together a user's actions or intentions.
Since data recovery services are not always necessary for every case, it is wise to first consider the following questions:
- Did the user(s) delete something?
- Did the user(s) intentionally hide something?
- What were the user(s) doing / what was their intent?
- What did the user(s) access?
- Is there any potentially discoverable / relevant information on damaged media?
|
|
- Deleted files
- Virus infected files
- Fragmented files
- Scratched media surfaces
- Mechanical failures
- Water damage
|
At Ignited, we perform recoveries using industry-leading technology and tools to safely recover any and all data. Our team consists of professionals with years of experience recovering data located on various platforms. Our procedure includes imaging data in a non-invasive manner while maintaining full chain of custody. All physical errors are resolved in a certified ISO 14644 clean room to comply with all necessary regulations. Finally, we can generate proper reports and comply with any court requests.
- Desktop / Laptop recovery
- Server recovery
- Raid array recovery
- OS recovery
|
- Tape recovery
- E-mail / File recovery
- Flash memory recovery
- Mobile device recovery
|
|
| 