Questions tagged [data-recovery]

For questions generally relating to recovery of "plain" data from digital storage, when that storage has been damaged or the credentials securing it are lost.

Data recovery is usually required in one of two cases:

  • Data was stored in a persistent mechanism such as a magnetic medium or flash memory, and that storage media has become damaged so that it cannot be read normally.

  • Data was stored in an obfuscated state, such as having been encrypted, and the key or credentials needed to recover the data have been lost.

In IT Security, questions asked are usually concerned with the second reason; recovery of data from an encrypted or hashed state (questions relating to recovery of data from damaged storage are usually asked on the Super User or Server Fault SE sites). This goal is usually frustrated by the very purpose of such methods; to make it infeasibly difficult to obtain the "plaintext" from the "ciphertext" or "hash".

Some common data encryption systems, especially those used to protect user accounts, have some sort of recovery option built in. This "back door" is designed to allow an administrator an alternate way to retrieve the data using their own credentials or other high-level secrets. However, many systems that place a primary emphasis on account or data security, provide only one efficient way to retrieve the data; know the password. Without a "back door", administrators or other "white hats" attempting to get the data for innocent purposes are limited to using the same "attacks" that someone with nefarious goals would have: "brute-force" cracking, or any documented attacks on the specific encryption scheme used by the system.

198 questions
9
votes
3 answers

Is filling up the empty space in a disk with any data enough measure against file recovery

If I have an important data in a disk (flash, SSD or HDD) and I deleted them, I know it is easy to recover these deleted data (even by using free software like recuva. Now if I fill this disk with any data, let's say a large movie file or so until…
Nean Der Thal
  • 597
  • 2
  • 5
  • 12
4
votes
2 answers

Terminated user did something to corrupt OS and data on turned in laptop

I am a senior systems engineer at a mid-sized ASP/hosting company. 9 or 10 months ago we had a large lay off which included our company's marketing director. None of our upper management thought to take the time to look through his emails or laptop…
user165597
  • 41
  • 1
3
votes
4 answers

SSD is formatted twice and filled twice. Can i recover old deleted data?

I need to recover some old data which were stored on a drive. The data were deleted and the hard drive was formatted twice and filled twice with random data intentionally. First the drive had a Windows 7 installed. Then it was formatted twice with…
Vini7
  • 659
  • 6
  • 15
2
votes
1 answer

How do I recover files on a secure sigital internal physical volume - MS-DOS (FAT32) disk?

I have a very old 256 MB SD card (purchased around 2004). The SD card is still working, but some old photos are missing due to a possible unintentional format action on my digital camera. Is there any way to recover the data on it?
AGamePlayer
  • 123
  • 4
1
vote
1 answer

Recover data after multiple wipe

I have a company laptop where I had many of my personal files and pictures. Now, I'm leaving for a new opportunity and I need to give them back the machine. So I used DBAN to wipe the hard drive. I'm a bit paranoid so I wiped the HDD many times with…
August
  • 11
  • 2
1
vote
2 answers

Wipe free space with zeros, how secure?

Possible Duplicate: How can I reliably erase all information on a hard drive? If I wipe free space with zeros instead of random data to finish fast will that write old file to be unrecoverable, will use this command on ubuntu on ntfs and ext4…
illsecure
  • 157
  • 3
  • 9
1
vote
1 answer

Data recovery for pulling out all data, and software to find types of content

I am looking to do data recovery on disk drives and memory cards. For this I want a device or type of software which allows me to pull out the following data: Allocated space Unallocated space Slack space Bad blocks I also need a software which…
Chris Dale
  • 16,151
  • 10
  • 59
  • 97
0
votes
4 answers

How difficult is it to protect your storage from data recovery

Many of my customers refuse to sell or recycle their old hard drives or mobile phones because everybody now-days talks about how popular data recovery program's are. Isn't it enough to use a software to write a zero to every byte of the storage area…
Ulkoma
  • 8,773
  • 17
  • 68
  • 96
0
votes
0 answers

Recovering a formatted drive that used to be encrypted with Bitlocker

I'm dual booting Windows and Mint on my laptop and I have a separate NTFS hard drive that I use to store my personal data. The hard drive used to be compatible with Mint, even though it was encrypted using Bitlocker, it worked fine. A couple of days…
Amirreza A.
  • 101
  • 1
0
votes
1 answer

Can you teach scalpel to recognize a file

I have a few drives that have been reformatted that I need to retrieve data from. A friend told me that an app like scalpel might be a good option for doing this. After some research it looks like a great tool if you need to recover common file…
0
votes
1 answer

DBAN under PC for an HDD using MAC OSx

A HDD with OSx installed removed from mac and used DBAN to wipe it under a PC. Does all the data is lost even if we put it back on a mac machine ?
August
  • 11
  • 2
0
votes
3 answers

How many overwrites make a drive undesirable?

I wanted to wipe free disk space of my PC, as I had accidentally deleted confidential data permanently without securely deleting them. So wiping the entire free disk seems to be the only option now. I know that generally 1 overwrite is enough and no…
Jay Shah
  • 339
  • 2
  • 4
  • 13
0
votes
0 answers

Secure Erase for IOS

The topics about secure erase for IOS on this site is a bit dated. Technology has definitely changed, including the tools used for forensics. Are there any secure erase softwares or techniques that someone could use to prevent any data recovery?…
Cudi
  • 1
  • 1
0
votes
1 answer

Can someone bypass/recover/access data to Hard-Drive when Password Protected?

I've decided to designate a separate topic to this question ( even though I've mentioned this in topic: Best practice to secure hard-drive of computer(laptop) in case of Stealing ^ Loss ^ Unauthorized access? ), so this question is not duplicate. If…
T.Todua
  • 2,727
  • 4
  • 21
  • 30
0
votes
1 answer

Recovering Data from a 1-Pass Zero'd Hard Disk Drive

I don't want to do this, but I'm wondering how easy it is to do? Or to put it another way, I'm wondering "is a 1-pass zero of a drive enough?" From what I understand, it's completely wiped from anyone that would try to recover data by connecting the…
l008com
  • 111
  • 4
1
2