Difference Between Normal Data Recovery Software and Forensic Recovery Software

Shah Saeed

Reputable
Nov 14, 2015
21
0
4,510
What Is The Difference Between Normal Data Recovery Software Like EaseUS And Wondershare And Forensic Data Recovery Software Like FINALDATA And Blade??Do The Forensic Ones Work Any Better?????


I Have Heard Hackers And Data Forensic Experts Claim To Have Recovered Web Searches Way Back As 10 Years Ago?Are Their Claims Valid??
 

TyrOd

Honorable
Aug 16, 2013
527
0
11,160
Forensic has nothing to do with what can be recovered. Encase/FTK are the industry standard tools for making "Forensic Images" that cannot be tampered with without the investigator's knowledge.

Forensic refers to being admissible as evidence for court/legal purposes.

The universal limit of both traditional data recovery and digital forensics/ediscovery is that no data that has been overwritten can be recovered and no data that cannot be physically read from a hard drive(due to damage to he platters) can be recovered. Things like browser search logs that haven't been overwritten can easily be recovered by virtually anyone who knows what the structure of those logs typically looks like. Software just automates the process by looking for those typical markers.

Some software is better for some types of data and certain types of corruption while other software may be better for other variations.

Professionals who do ediscovery investigations use lots of different commercial and custom built software as well as manual searches when needed.

It's that simple really.