ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.

3+1 data recovery

From ForensicsWiki
Revision as of 12:20, 16 July 2009 by Honglake (Talk | contribs) (Created page with '== Overview == 3+1 Data Recovery: to know the broad sense data recovery better There is more data you can recover from your client's drives. Let [ S…')

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search


3+1 Data Recovery: to know the broad sense data recovery better

There is more data you can recover from your client's drives. Let SalvationDATAData Recovery Systems show you what is a broad sense data recovery approach.

SalvationDATA Data Recovery Solutions pioneered the Broad Sense Data Recovery Approach – A professional approach contains three plus one (3+1) aspects (listed below). SalvationDATA has now developed manufacturer-level tools, in-depth trainings & materials and tech-support services to deal with the challenges of all 3+1 aspects. You could click on each stage listed below to know more about them File:Http://

The Pretext of 3+1 Data Recovery

At SalvationDATA, from the existed approach contains 3 stages only, we felt that the data recovery industry was in need of a more comprehensive approach to the broad sense data recovery need that handles all aspects: microcode, hardware component, bad sector/ instable head and file system. Many companies were claiming to do "full" data recovery, but were in fact only doing the data-level recovery probably by downloading software, while in the meantime 40%-50% potential data on the lower level is left behind, or worse, gone forever. The SalvationDATA 3+1 Data Recovery approach addresses hardware-level and software-level issues like microcode, hardware component, bad sector/ instable head and file system so that to make sure the maximum amount of data is retrieved.

An approach developed and spread from the wrong side

By understanding thoroughly the SalvationDATA 3+1 Data Recovery flow, when we look back to the days without this concept, we will find that the data recovery stages included in the flow were developed and known from the wrong end.

Stage 3, of all the stages,, data retrieval, is the most widely spread and long-running; all data recovery companies, even end users, by downloading software, can handle mission of this stage easily. But according to SalvationDATA experts only 30%- 40% percent of all data recovery cases are simply stage 3 cases. The left percentage requires an ability to handle with the stage 2 and stage 1&+1 issues.

Stage 2, disk data extraction, is also widely known and adopted as “disk imaging” by data recovery services nowadays. But to SalvationDATA, according our experience with lots of potential clients, they perform this important stage using ghosting tools designed for and work on good HDDs only, not the patient HDDs that are unstable or inaccessible because of media defects and instable head, which are common challenges of Stage 2 in practice. Even more, with those traditional imaging tools, the time involved and the ordinary user-level repeated-read access to the media bring a risk of damaging the disk and head, making data lost irretrievable.

Stage 1, drive diagnosis & restoration, is the primary stage in a broad sense data recovery flow but in fact deals with the deepest level in 3+1 broad sense data recovery flow. Unfortunately this Stage 1 is missing from most of the data recovery services or even noticed but was being done in a zigzag procedure or simply incorrectly due to lack of proper tools, meaning that they are putting away customers and profits. Our data has shown that up to 40% of data recovery cases have Stage 1 issues; and that IS NOT what going to happen that we can skip Stage 1 and perform Stage 2 and 3 and still to get certain percentage of data. You CAN NOT get anything in case you are not capable for the primary stage.

Stage +1, hardware component exchanging, is an extra but very important stage follows the Stage 1 diagnosis. This special stage handles with hardware component issues which can't be repaired but the only solution is to have the components exchanged using donor parts. Strictly speaking, Stage +1 is part of Stage 1: Drive Restoration; but we specially separate it from Stage 1 since it is kind of different level issue composing the comprehensive data recovery flow.

The 3+1 Broad Sense Data Recovery flow starts with the deepest level issues where the shoe pinches: Drive In-depth diagnosis and Restoration (include microcode level restoration as well as hardware component exchanging), and then the much more direct disk data extraction, and finally goes to the stage 3 which appears to be the most fruitful but in fact is the most common and the easiest one handles with the thinnest level issues.