Difference between pages "Data Compass" and "Libesedb"

From Forensics Wiki
(Difference between pages)
Jump to: navigation, search
(→‎Related links)
 
 
Line 1: Line 1:
−
== Overview ==
+
{{Infobox_Software |
−
Data Compass is a hardware and software data recovery tool produced by [[SalvationDATA]].
+
  name = libesedb |
 +
  maintainer = [[Joachim Metz]] |
 +
  os = [[Linux]], [[FreeBSD]], [[NetBSD]], [[OpenBSD]], [[Mac OS X]], [[Windows]] |
 +
  genre = {{Analysis}} |
 +
  license = {{LGPL}} |
 +
  website = [http://libesedb.sourceforge.net libesedb.sourceforge.net] |
 +
}}
  
−
According to our pioneer [[3+1 Data Recovery]] process, the stage following the drive restoration will be data recovery using Data Compass.
+
The '''libesedb''' package contains a library and applications to read  the [[Extensible Storage Engine (ESE) Database File (EDB) format | EDB File]] format.
  
−
After bringing the failed drive back to life, as a data recovery professional, you know now you need to recover the damaged file system by using file system recovery software; and maybe you know also you need to do a disk imaging in order to work from an accurate, stable hard drive image.
+
The [[Extensible Storage Engine (ESE) Database File (EDB) format | EDB File]] format is used by many Microsoft applications to store data such as:
 +
* Active Directory (NTDS)
 +
* File Replication service (FRS)
 +
* Windows Internet Name service (WINS)
 +
* DHCP
 +
* Security Configuration Engine (SCE)
 +
* Certificate Server
 +
* Terminal Services Session folder
 +
* Terminal Services Licensing service
 +
* Catalog database
 +
* Help and Support Services
 +
* Directory Synchronization service (MSDSS)
 +
* Remote Storage (RSS)
 +
* Phone Book service
 +
* Single Instance Store (SIS) Groveler
 +
* Windows NT Backup/Restore
 +
* Exchange store
 +
* Microsoft Exchange folder (SRS and DXA)
 +
* Key Management service (KMS)
 +
* Instant Messaging
 +
* Windows (Vista) Mail
 +
* Content Indexing/Windows (Desktop) Search
  
−
Unfortunately, traditional disk imaging tools and methods are designed for and work on good HDDs only, not the patient HDDs that are unstable or inaccessible because of media defects and instable head, which are common challenges of Stage 2 in practice. Even more, with those traditional imaging tools, the time involved and the ordinary user-level repeated-read access to the media bring a risk of damaging the disk and head, making data lost irretrievable.
+
== History ==
  
−
But now there's a better way: The disk probing equipment included in the Data Compass suite bypassing the disk-level problems such as multiple bad sectors, damaged surfaces, malfunctioning head assembly, or corrupted servo info, In the meantime you can use the default software or any other defined software you have been familiar with (R-studio, Winhex, any) to perform file recovery. Through the Data Compass, problem drives will become intact hard drives and ready for file recovery attempts..
+
Libesedb was created by [[Joachim Metz]] in 2009, while working for [http://en.hoffmannbv.nl/ Hoffmann Investigations].
  
−
== What can Data Compass do? ==
+
== Tools ==  
 +
The libesedb package contains the following tools:
 +
* '''esedbexport''', which exports the items stored in ESE database files.
 +
* '''esedbinfo''', which shows the information about ESE database files.
  
 +
== External Links ==
  
−
Data recovery from physically damaged HDDs is what Data Compass designed for.
+
* [http://libesedb.sourceforge.net/ libesedb project site]
−
 
+
−
' Data recovery from HDDs with severe multiple BAD sectors, which appear because of platter surface scratch or malfunction or instability of the magnetic head assembly (MHA).
+
−
 
+
−
' Data recovery from HDDs that start to produce "clicking" sounds, which may be caused by corruption of sector servo labels or a MHA malfunction. If some heads or surfaces are damaged it is possible (before installation of MHA replacement) to create a copy of data using the remaining good surfaces or drive heads.
+
−
 
+
−
' Availability of tools for logical analysis of FAT and NTFS file systems in the software complex allows data recovery in cases, when a drive is functional and only logical data structure is corrupted.
+
−
 
+
−
'When used with malfunctioning drives, Data Compass complex often allows selective extraction of data necessary to your customers without reading all data from a drive ("recover data by file" without creating a complete disk image) saving a lot of time. In some cases, when drive malfunctions cause constant self-damage (like scratches on disks or instable MHA) these are the only means to accomplish this task. With the ShadowDisk technology adopted, users need not to worry about the drive degradation problem.
+
−
 
+
−
== Related links ==
+
−
 
+
−
[http://www.salvationdata.com Official Webiste]
+
−
 
+
−
[http://www.salvationdata.com/downloads/pdf/grow-your-business-with-dc.pdf Data Sheet of Data Compass]
+
−
 
+
−
[http://www.salvationdata.com/data-recovery-equipment/data-compass.htm Customer Reviewer]
+
−
 
+
−
 
+
−
[http://www.salvationdata.com/blog/category/data-compass-case-studies Case Studies]
+

Revision as of 08:44, 11 December 2010

libesedb
Maintainer: Joachim Metz
OS: Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows
Genre: Analysis
License: LGPL
Website: libesedb.sourceforge.net

The libesedb package contains a library and applications to read the EDB File format.

The EDB File format is used by many Microsoft applications to store data such as:

  • Active Directory (NTDS)
  • File Replication service (FRS)
  • Windows Internet Name service (WINS)
  • DHCP
  • Security Configuration Engine (SCE)
  • Certificate Server
  • Terminal Services Session folder
  • Terminal Services Licensing service
  • Catalog database
  • Help and Support Services
  • Directory Synchronization service (MSDSS)
  • Remote Storage (RSS)
  • Phone Book service
  • Single Instance Store (SIS) Groveler
  • Windows NT Backup/Restore
  • Exchange store
  • Microsoft Exchange folder (SRS and DXA)
  • Key Management service (KMS)
  • Instant Messaging
  • Windows (Vista) Mail
  • Content Indexing/Windows (Desktop) Search

History

Libesedb was created by Joachim Metz in 2009, while working for Hoffmann Investigations.

Tools

The libesedb package contains the following tools:

  • esedbexport, which exports the items stored in ESE database files.
  • esedbinfo, which shows the information about ESE database files.

External Links

Retrieved from "http://www.forensicswiki.org/w/index.php?title=Data_Compass&oldid=10019"
Personal tools
Namespaces

Variants
Actions
Navigation:
About forensicswiki.org:
Toolbox