|
[Q] What is computer forensics?
[A] Computer forensics is the process of examining data to reveal illicit activity or recover lost information. A computer forensics investigation includes the response to and evaluation of a potential computer crime in addition to gathering evidence and maintaining a chain of custody.
[Q] What is data recovery?
[A] Data recovery is the process of retrieving the data from damaged disk drives, media, computers, peripherals or operating systems or recovering lost or deleted data from media.
[Q] Can deleted files be restored?
[A] Yes, if they have not been completely overwritten. If they have been partly overwritten, the answer is maybe. Special utilities can help in this regard.
[Q] What can computer forensics/data recovery actually recover?
[A] Often, forensics are invoked to recover: hidden files; damaged or corrupted files; deleted files; password protected files; encrypted files; email and web mail correspondence; evidence of web browsing and internet chat data.
[Q] Can I recover my data if I reformat my hard drive?
[A] In most cases we are able to fully recover data from drives which have been reformatted as well as had an Operating System re-installed.
|
