Page 2 of 2 FirstFirst 12
Results 11 to 12 of 12

Thread: Needle in a haystack

  1. #11
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,188
    Hi EG~,

    That is a slightly different concept. I would say that if you have overwritten a file then it is gone.......... there is no software recovery method, and the forensics route would be destructive.

    I would question whether even a government funded forensics operation would be successful, particularly on a drive that has been used for some time..... like which layer could you identify?

    The only (partially) successful experiments I have read about were in carefully controlled; laboratory conditions with a new drive and the data overwritten once.

    A lot of "recovery" software relies on being able to find the backup of the MTF (Windows) or finding contiguous files.

    The tool I suggested is the best I have found for those "no hope" situations. My view is that a 64 byte file is pretty small, so it may not have been overwritten with any luck?

  2. #12
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,401
    I agree, if it's overwritten I'm dead...

    Quote Originally Posted by "nihil
    My view is that a 64 byte file is pretty small, so it may not have been overwritten with any luck?
    That's what I'm hoping for
    Oliver's Law:
    Experience is something you don't get until just after you need it.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •