CHFI v3 Module 15 Recovering Deleted Files and Partitions.pdf

(5307 KB) Pobierz
Computer H ki
C
Hacking
Forensic Investigator
Module XV
Recovering Deleted Files
and Deleted Partitions
Scenario
William Hi k a 44-year-old Mi
Willi
Hickey,
ld Mingus U i Hi h S h l t h was
Union High School teacher,
suspected of downloading pornography on his personal computer.
The computer was sent to the DPS (Department of Public Safety) crime
lab for an official forensic investigation. Then it was turned over to the
police for investigation, to find whether the computer contained images
of child pornography.
p
g p y
Source: http://verdeindependent.1upsoftware.com/main.asp?SectionID=19&SubSectionID=23&ArticleID=20357&TM=28785.47
EC-Council
Copyright © by
EC-Council
All Rights reserved. Reproduction is strictly prohibited
Module Objective
This module will familiarize you with the following:
Recovery of deleted files:
•
Deleting files.
•
What happens when a fil i d l d
h h
h
file is deleted.
•
Recycle bin.
•
Data recovery in Linux.
•
Data recovery tools.
Recovery of deleted p
y
partitions:
•
Deletion of partitions.
•
Recovery of deleted partitions.
•
Partition recovery tools.
EC-Council
Copyright © by
EC-Council
All Rights reserved. Reproduction is strictly prohibited
Module Flow
Deleting files
What happens when a
file is deleted
Data
D t recovery i Li
in Linux
Recycle bin
R
l bi
Data recovery tools
Deletion f
D l ti of partitions
titi
Recovery of
deleted
d l d partitions
ii
Partition recovery tools
EC-Council
Copyright © by
EC-Council
All Rights reserved. Reproduction is strictly prohibited
Computer H ki
C
Hacking
Forensic Investigator
Part I
Recovering Deleted Files

Plik z chomika:

Inne pliki z tego folderu:

Inne foldery tego chomika:

Zgłoś jeśli naruszono regulamin