Writing to media

[rtkiefer]

I'm looking for a quick to use program for data recovery. I currently use Encase 4.0 for most data recovery. But sometimes I just need to recover data and media files without any analysis.

This program looks promising but my question is, does this program write to the original drive/media being analyzed?

[admin]

No, the program does not write to the original drive.

I suggest that you image the target drive with EnCase, mount it with Mount Image Pro - www.mountimage.com and then run Recover My Files over the mounted image.

That way you know you are operating in a forensic environment.

[rtkiefer]

Thanks for the reply. I was hoping to not have to use Encase for working with flash memory cards. Since Encase 4, it has been somewhat ponderous to get images into the program for analysis. What I may try to do is hash the flash card before and after running your program to ensure it's integrity.

[GDH]

Please send your question directly to brett@**getdata.com (take out the **). He is the lead developer and can give you the precise information to make your task forensically sound.