[Case Study] WhatsApp Forensics:Decryption of Encrypted Databases and Extraction of Deleted Messages
[News] First SalvationDATA Tech Championship
DRS Update of Underlying Code & Ordering Style
Comparing with the last update, the latest version of DRS has been highly optimized on operation and underlying code compiling and running. Optimized Function & Thoughtful Guidance 1. Optimized Hexadecimal Editor ModulePragmatically Hexadecimal Operation Module has been added to onto DRS. That module makes users able to make “Jump” and “Syn-Jump” on HDD table, and show us an easy way of viewing Disk Partition and viewing files in hex. “In Hexadecimal Editor Module, you can jump directly to the ‘new position’ inputted.” 2. Redesigned DR Report with MD5 Verification Newly AddedAccording to earlier feedback from our customers, the DR report has been redesigned in formation. To mainly readjust the order rules and classification methods of the report, it has largely improved the readability and practicability. In addition, the latest DRS adds MD5 verification which provides customers various and valuable method of verification. “New style of ordering in DR report” 3. Designat
Upgrade to 126.96.36.199, we are preparing for the final update of DRS for you!
The long-awaited Data Recovery System is going for final checks and upgrades before its official launch. Having upgraded to 188.8.131.52, Data Recovery System has increased two additional functions for photo viewer and shortcut key. In addition, some programs are further optimized. Two additional functions make easier operation 1. Photo Viewer: View, Rotation, ScalingUnder thumbnail mode after file scan, the large image can be shown by double-click, and it can be shrinked and rotated. Direct preview of the deleted picture 2. Shortcut key: Search, Skip, RefreshHaving been added 14 shortcut keys, Data Recovery System is simpler to operate. What is more, R&D team will consistently add more shortcut keys for users to improve efficiency. Furthermore, the 184.108.40.206 version has optimized 5 performances in data recovery and image process. Say, the direct view in hexadecimal content can be implemented by right-click on file. And by adjusting some parameters, the new version has made some hard disk
DRS Core Function VI – Physical Recovery
DRS supports imaging in bad sectors, providing solutions to stuck disk when imaging and even to inoperable sector data etc. You can customize the configuration of accuracy to load sector data and image copy-failed sectors. The process of image are displayed on real-time basis giving solution to bad sector imaging through anti-stuck technology.Main Features:Ø Applied UDMA-133 transform technology, and the testing copy speed reaches 12GB/minØ Support copying data for HDD, USB Flash, CF cards and TF cards by IDE/SATA portsØ Monitor the whole imaging process in real timeØ High-speed copy bad-track HDD with IDE/SATA/USB portsØ Precisely read sectors on bad-track HDDØ Support reading data by forward/backward or reading repeatedly in order to extract more dataØ Use different colors to show imaging fast or slow during the imaging process Unlike physical repair, the physical recovery module mainly provides solutions to bad sectors and a series of issues when imaging, whic
DRS Core Function VII – Video Data Analysis
Storage media supported by DRS are variety of types. Besides the traditional data recovery of HDD, DRS is able to analyze the data on the storage device of surveillance video. That ability built by 5 core functions, Ultra-playing, Video-retrieving, Super-transcoding, Map-tracking and Data-retrieving.When DRS works on the analysis of video data, it can extract and track the moving object based on video frame variation. By this way, to get traces of all moving object would be entirely easy. In addition, it is capable of retrieving the stationery frame and shortening video viewing time. The video analysis function of DRS can be explained as following.1. DRS can be served as a ultra-player and transcode tool in that it can support mainstream video format and most of the surveillance video format, and can convert it into standard AVI format.2. With the broadcast functionality by retrieval, it can ignore the stationery frame and adjust the kinetic frame speed.3. Support video retrieval, DRS
To Extract Data From the Hard Disk with the Damaged-head Shielded -- the Latest Technology From SalvationDATA
Data storage in the Hard Disk Drive (HDD) is processed by magnetic read/write heads. Due to the time cost and other uncontrollable external factors, the head is easy to be damaged, the platter is easy to be worn, even much worse mechanical failure happened. Mostly, the mechanical failures include abnormal noise, stiction, disability of seeking, pause in spin, none spin once power on again. Normally, we can install a suitable head instead of the bad one to fix those failures. But in actual operation, the failures cannot be fixed in many times even the damaged-heads replaced. The reason might be unmatch of the heads or some platters worn even the heads are matched. So the drive cannot work in normal. Even worse, after the update, the new heads are damaged again when the heads read the the worn platters. Regarding those failures, SalvationDATA conducts a research and gets a fresh technology to read data from the drive by shielding the damaged-head. The technology is used for data
Spring Festival Holiday Notice
Please kindly note that from February 7, 2016 to February 13, 2016 is Chinese Spring Festival Holiday. SalvationDATA Headquarter will be closed during the holiday and will be reopened on February 14, 2016. We would like express our sincere thanks to all our customers and partners, for your kind support during the last year. SalvationDATA would like to share your happiness with every one of you during Chinese traditional New Year.SalvationDATA Headquarter
DRS Core Function V – Deep Recovery
Conducting more professional data recovery, Deep Recovery Module performs more comprehensively but longer compared with Quick Recovery Module.Main Features:Ø Recover lost data caused by wrong partition/virus damage/partition lostØ Recover image filesØ Recover audio filesØ Recover Word filesØ Recover compressed file typesØ Recover uncommon file typesØ Support user-defined data recoveryØ Support catalogue recovery excluding MFT catalogueØ Support directly reading scanned partition Deep Recovery Module can proceed restore for various files, including image, audio, video and word files, in storage media. And for some complex conditions like partition loss, format, accidental deletion and clone, DRS can conduct file reorganization. Its advanced ProRecover logical recovery technology can achieve comprehensive and complete recovery.
SalvationDATA Does Products Demonstration for Cambodia Government
On January 21, 2016, at the invitation of the 30th Institute of China Electronics Technology Group Corporation (CETC), SalvationDATA Technology, Inc. did products demonstration for a government agency of Kingdom of Cambodia. Involved with a great deal of advanced defense security devices around the globe, the demonstration took information security as the subject.During this demonstration, SalvationDATA technical engineer has introduced five key SalvationDATA products, including HD Doctor Suite, Flash Data Recovery Doctor, Data Compass, Data Copy King and the new product Data Recovery System, to the government department of Cambodia. Both the SalvationDATA products and engineer's presentation have been well received by everyone present. Particularly worth mentioning is the new product Data Recovery System has caught much attention. As the technical engineer explained, the officially released date for Data Recovery System would be in March 2016.
DRS Core Function IV – Physical Repair
Physical Repair Module works for HDD non-recognition, firmware damage, ATA encryption, SMART list fault, data area read-only and etc. It supports 3.5”, 2.5”, 1.8” HDD of West Digital, Seagate, Hitachi, Toshiba, Maxtor, Fujitsu, Samsung.Main Features:Ø Repair non-recognition HDD caused by firmware damage or lostØ Repair non-recognition HDD caused by SMART list faultØ HDD F-level data recovery and repairØ Repair and recover encrypted HDDØ Repair LBA=0 for Seagate 7200.11 seriesØ Solve the Seagate F3 problem where No access is allowed due to disorder of NG-ListØ Solve a common issue where WD ROYL series become extremely slow during resetting, leading to the lower possibility of load & writeØ Solve unable fixing HDD due to DDD records in firmware having reached its ceilingØ One-click to NVRAM backup and the inaccessibility due to Hitachi HDDs NVRAM damageThe physical repair deals with various issues caused by physical faults rather than logical failure. In most cases, the HDD’s fa
DRS Core Function III - High-speed Image
Imaging is a necessary function in data recovery tools. By imaging, users can safely image original data from a patient HDD to another HDD or imaging files. After imaging, users can recover data from the cloning one so that the original can be totally saved and protected.High-speed imaging module can comprehensively image and clone data from normal hard drives/USB flash/CF card/TF card etc., which is widely applied to HDD copy by byte-to-byte and HDD image in the digital forensic field.Main features:Ø Applied UDMA-133 transform technology, and the testing copy speed reaches 12GB/minØ Support copying data for IDE/SATA, HDD, USB Flash, CF cards and TF cards at high speedsØ Monitor the whole imaging process in real timeØ Precisely record the number of sectors that failed to copy during the imaging processØ Use different colors to show imaging fast or slow during the imaging processAt the same time, DRS integrates Super image solution, which can precisely read data on bad-track HDD an