![]() ![]() The additional information is not necessary if you’re not recovering data under law enforcement. Key in the case details as you wish in the dialog box shown below: When the installation is complete, launch the Autopsy software and click create a new case as shown below: Step 1: Creating a case fileįiles that need to be analyzed, as well as the data to be recovered are called cases in Autopsy. In this tutorial, we will learn how to use Autopsy as a data recovery software.Īutopsy is the graphical user interface for the Sleuth kit program.Īs a forensic tool, it only performs analysis and does not support the functionality of imaging storage media, this means that an image of the original media needs to be have been created using another software tool. In some cases, the recovered data is larger than the disk default capacity. The following is an example of a disk image created using Access Data FTK imager.Įnsure that you have enough storage to accommondate the recovered data. We treat the created image as the source from which we recover data. The following are some of the commonly used tools:Ĭreate an image of the drive whose data is to be recovered to preserve data in case anything goes wrong during the recovery attempt. There are various tools used in data recovery, some are free, and others require payment. This issue not only causes loss of unsaved data but may corrupt some existing files. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |