Difference between pages "TestDisk" and "IEEE/SADFE-2009"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(File systems)
 
m (New page: IEEE/SADFE-2008 3rd International Workshop on Systematic Approaches to Digital Forensic Engineering Thursday, May 22, 2008 The Claremont Resort, Oakland, California Sponsored by the IEE...)
 
Line 1: Line 1:
{{Infobox Software
+
IEEE/SADFE-2008
| logo = [[Image:TestDisk-logo.gif]]
+
| name = TestDisk
+
| developer = Christophe Grenier
+
| maintainer = Christophe Grenier
+
| latest_release_version = 6.8
+
| latest_release_date = August 13, 2007
+
| os = {{Linux}}, {{Windows}}, {{Mac OS X}}, Dos, BSD
+
| interface = Command line interface
+
| genre = Data recovery
+
| license = GPLv2+
+
| website = [http://www.cgsecurity.org/wiki/TestDisk TestDisk Wiki]
+
}}
+
  
'''TestDisk''' is a free software data recovery utility licensed under the terms of the GNU General Public License (GPL). It was primarily designed to help recover lost data storage partitions and/or make non-booting disks bootable again when these symptoms are caused by faulty software, certain types of viruses or human error (such as accidentally erasing a partition table).
+
3rd International Workshop on
 +
Systematic Approaches to Digital Forensic Engineering
  
[http://www.cgsecurity.org/wiki/TestDisk_%26_PhotoRec_in_various_digital_forensics_testcase Forensics usage of TestDisk and PhotoRec] is described on the web site.
+
Thursday, May 22, 2008 The Claremont Resort, Oakland, California
  
==Summary==
+
Sponsored by the IEEE Technical Committee on Security and Privacy
TestDisk queries the BIOS or the operating system in order to find the hard disks and their characteristics (LBA size and Cylinder-head-sector geometry). TestDisk does a quick check of your disk's structure and compares it with your Partition Table for entry errors. If the Partition Table has entry errors, TestDisk can repair them.
+
Held in conjunction with the 2008 IEEE Symposium on Security and Privacy
  
However, it's up to the user to look over the list of possible partitions found by TestDisk and to select the one(s) which were being used just before the drive failed to boot or the partition(s) were lost. In some cases, especially after initiating a detailed search for lost partitions,
+
Call for Papers
TestDisk may show partition data which is simply from the remnants of a partition that had been deleted and overwritten long ago.
+
Deadline for full papers and "Works In Progress" papers
 +
February  1, 2008
  
TestDisk has features for both novices and experts. For those who know little or nothing about data recovery techniques, TestDisk can be used to collect detailed information about a non-booting drive which can then be sent to a tech for further analysis. Those more familiar with such procedures should find TestDisk a handy tool in performing onsite recovery.
+
http://conf.ncku.edu.tw/sadfe/sadfe08/cfp.html
 
+
==Supported operating systems==
+
* [[DOS]] (either real or in a Windows 9x DOS box);
+
* [[Microsoft]] [[Windows]] (NT4, 2000, XP, 2003, Vista);
+
* [[Linux]];
+
* [[FreeBSD]], [[NetBSD]], [[OpenBSD]];
+
* SunOS and
+
* [[Mac OS X]]
+
 
+
==File systems==
+
TestDisk can find lost partitions of the following file systems:
+
* Be File System (BeOS)
+
* BSD disklabel ([[FreeBSD]]/[[OpenBSD]]/[[NetBSD]])
+
* [[Cramfs]], Compressed File System
+
* DOS/Windows [[FAT]] 12, 16, and 32
+
* [[HFS]], [[HFS+]] and [[HFS+|HFSX]], Hierarchical File System
+
* IBM Journaled File System 2 (JFS2), IBM's Journaled File System
+
* [[Linux]] [[ext2]] and [[ext3]]
+
* [[Linux]] RAID
+
** RAID 1: mirroring
+
** RAID 4: striped array with parity device
+
** RAID 5: striped array with distributed parity information
+
** RAID 6: striped array with distributed dual redundancy information
+
* Linux Swap (versions 1 and 2)
+
* [[Linux Logical Volume Manager (LVM)|LVM]] and [[Linux Logical Volume Manager (LVM)|LVM2]], [[Linux Logical Volume Manager (LVM)|Linux Logical Volume Manager]]
+
* Mac partition map
+
* Novell Storage Services (NSS)
+
* [[NTFS]] ([[Windows]] NT/2000/XP/2003/Vista/2008)
+
* [[Reiserfs | ReiserFS]] 3.5, 3.6 and 4
+
* Sun Solaris i386 disklabel
+
* Unix File System: [[Unix File System|UFS]] and [[Unix File System|UFS2]] (Sun/BSD/...)
+
* XFS, SGI's Journaled File System
+
 
+
== See also ==
+
* [[PhotoRec]]
+
 
+
==External links==
+
* [http://www.cgsecurity.org/wiki/TestDisk TestDisk Wiki]
+

Revision as of 10:46, 16 January 2008

IEEE/SADFE-2008

3rd International Workshop on Systematic Approaches to Digital Forensic Engineering

Thursday, May 22, 2008 The Claremont Resort, Oakland, California

Sponsored by the IEEE Technical Committee on Security and Privacy Held in conjunction with the 2008 IEEE Symposium on Security and Privacy

Call for Papers Deadline for full papers and "Works In Progress" papers February 1, 2008

http://conf.ncku.edu.tw/sadfe/sadfe08/cfp.html