Recover deleted data Smart/MMC Cards
There are times when my clients want to recover deleted data, whether it is from mobile telephones, SIM or USIM cards or smart/mmc cards. The screen images below demonstrates some of the stages involved in recovering deleted data from an MMC card.
The screen image above illustrates that a target device has been selected using the easy to understand GUI.
Importantly, this screen demonstrates just some of the file types that have been selected to be recovered. There are, of course, many file types that can be recovered, such as: (images etc) 3GP, AVI, MOV, MP4. MPEG, RM, WM, DjVU, BMP, CDR, DCR, DWG, GIF, ICO, JPEG, MRW, NEF, ORF, PEF, PNG, PSD, PSP, RAF (1) & (2), RAW, SRF, TIFF, TTF, WMF, XIF. (audio) AIF, AU, AVR, DSS, M3U, MIDI, MP3, OGG, RIFF, VOC, WAV, WMA. This is apart from other document file types (such as .doc, .pdf, etc)
Having selected the file types for recovery that have been deleted (free space), the recovery process needs to be set in motion, shown in the above screen image.
Here we see the number of recovered files that had been deleted stands at 13 files. However, the MMC card from which the deleted data was recovered has memory size 32MB. However, it is possible to recover many tens of deleted files from cards with this memory size, and many hundreds of files for large memory cards (dependent on file size, of course).
Finally, here is a complete recovered file fully working 3GP video and metadata intact.
If you are in law enforcement, public sector, criminal or civil solicitors and need this service, please send an email to me with your full contact details at:
The Digital Evidence Examination Unit (The DEEU)
No comments:
Post a Comment