Hard Drive Data Retrieval
Update: Disk Investigator has not been updated in recent time. It is only compatible with XP and previous versions of Windows and not usable on later versions of the operating system. A program like OS Forensics may provide you with similar information on newer versions of Windows.
Disk Investigator is a pretty unique hard drive data retrieval tool that takes a totally different approach than the usual hard drive data recovery tools.
Disk Investigator provides direct access to the raw data sectors of a selected hard drive so that the hard drive's data can be explored up to the last bit.
The user can perform a sector to sector analysis of the hard drive, display raw file contents or perform a search on the selected hard drive or partition to find information of interest.
While the disk view may be interesting, the directories view is what resembles file recovery software the most.Disk View displays the hard drive data sectors while the Directories View the underlying file structure of the drive or partition.
A click on a file will open a raw file data viewer in a separate browser
This means that you have two options to find files on the hard disk. The first searches the raw information on the disk which can be useful, the second the actual file structure of the drive including deleted files.
So what will you find when your run a search or analyze the data on the hard drive? You will be able to discover opened urls, passwords, email contents, document contents and more.
The easiest way to discover the data is by running a search. You may be surprised by the amount of information that can be discovered when running Disk Investigator.
Another possible use for this software is to make sure that a disk wipe was successful. The software program works with most versions of the Windows operating system including Windows XP but with the exception of Windows Vista.
Cool…so is this basically a (much needed) resurrection of the Apple IIe era “nibble copiers”?
I used to have a DOS program way back in the early 1990s that did something similar…I presume the Feds have all kinds of tools like this for unearthing evil masterplans to take over the universe that were “deleted” just before the raid…
download appears to contain the trojan.banker.140 trojan virus…
This download has a virus, you might want to remove it.
Ever heard of false positives?
thanks for this post