Our website uses cookies

Cookies enable us to provide the best experience possible and help us understand how visitors use our website. By browsing Infosecurity Magazine, you agree to our use of cookies.

Okay, I understand Learn more

Detect and Survive

Download Now

To download this white paper you’ll need an Infosecurity Magazine account. Log in or sign up below.

Log In

Sign Up

Get up-to-the-minute news and opinions, plus access to a wide assortment of Information Security resources that will keep you current and informed.

This will be used to identify you if you take part in our online comments.
Your password should be at least six characters long. It is case sensitive. Passwords can only consist of alphanumeric characters or ~!@#$%^&*()_-+=?.

By registering you agree with our terms and conditions and privacy policy.

The ability to examine the contents of a hard disk or other storage device at a very deep level has long been a fundamental requirement of technical support personnel and data recovery specialists. They need to analyze the data below the level of the operating system, on a per-byte or per-sector basis, rather than per-file. Those bytes or sectors often comprise current files, but this may not always be the case. Often, the data will represent remnants of deleted files, or information from the partition table, directory structure or other key elements of the copious metadata that exists on every hard disk, CD, DVD, USB pen drive, SD card, and similar devices.

Beyond even the requirements of support personnel and data recovery specialists is a level of device examination product known as forensic examination software.