Chapter 9. Recovering Data

COMPUTER SYSTEMS CRASH, CORRUPTING FILES. Software fails, corrupting files. Workers accidentally delete files. Malware, disgruntled employees, and outside attackers intentionally corrupt or delete files. Regardless of the cause, system and data owners turn to individuals who have skills and experience to recover lost data.

In many instances, an organization won't be able to find lost data using the limited software tools available to most users. It can't even salvage data using the general recovery tools available to system administrators. In such cases, the business may need to call in a system forensics expert to apply special tools and techniques to recover and restore files. For example, a forensic expert may be ...

Get System Forensics, Investigation, and Response now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.