• left-quotesWe had one of our employees steal data from the company and gave it to one of our competitors...”

  • left-quotesSomeone has falsely accused me and my business of all kinds of illicit acts, damaging the company’s reputation and I want to know who was behind the profile to pursue legal action...”

  • left-quotesSomeone in our company deliberately deleted sensitive data, and we needed to identify what was deleted, when and by whom...”
  • left-quotesOur systems administrator used the datacenter servers to mine cryptocurrency over a period of several months, and we needed to have his devices investigated to pursue legal action...”

  • left-quotesAn employee leaked a confidential recording of one of our shareholder meetings causing a public relations disaster...”

REQUEST A FREE ONLINE QUOTATION

SEND YOUR DEVICE NOW

Forensic Data Recovery

Forensic data recovery from all types of digital storage device including Server, NAS, SAN, RAID volumes, PC, laptop USB hard drives, CCTV storage, mobile devices and memory sticks where specialized data recovery tools, equipment, software and skills are required to extract potential digital evidence.

Whether your storage device is suffering from an electro-mechanical failure, firmware corruption, hidden data in the service areas or password-protection our team of professionals will do all that is in our power to help you recover any potential evidence.

Typical Forensic Recovery And Investigation Scenarios:

  • Extraction of potential evidence from faulty as well as physically damaged storage devices including dropped, power surge, fire and water damaged devices.
  • Extraction of service area data (firmware), using factory access mode, that may be used to store data, malware, spyware etc.
  • Extraction of other non-addressable areas, using factory access mode, for example, media cache, that may contain data no longer available on the storage device.
  • Removal of BIOS and storage device passwords.
  • Password discovery and decrypting of firmware (hardware) encrypted storage devices.

We Recover And Investigate Data From Most File Systems And Partition Types, Including:

  • 12-bit FAT (FAT12)
  • 16-Bit FAT (FAT 16)
  • 32 Bit FAT (FAT 32)
  • Extensible File Allocation Table (exFAT)
  • New Technology File System (NTFS)
  • New Technology File System version 5 (NTFS 5)
  • NT3.5, NT4, Server 2000, Server 2003 R2, Server 2008 R2, Server 2012 R2, Server 2016, Server 2019, Server 2022
  • 3.0, 3.1, 95, 98, ME, 2000, XP, Vista, 7, 8, 10 and 11
  • Universal Disk Format (UDF) - CD/DVD media
  • Resilient File System (ReFS) - Server 2019, Server 2016, Server 2012 R2, Server 2012
  • Second, third and fourth extended file system (EXT2, EXT3 and EXT4) - Linux
  • Reiser File System (ReiserFS) - Linux
  • B-tree file system (Btrfs) - Linux
  • MFS, Hierarchical File System, HFS+, HPFS, APFS and ISO9660
  • FS1 and UFS2
  • Journaled File System (legacy JFS) and Enhanced Journaled File System (JFS2) - AIX and Linux
  • Virtual drives - VMware (VMFS), DD, IMG, BIN, VHD, VHDX, E01, ESX(i) volumes
  • NSS and NWFS
  • ZFS
  • OpenVMS
  • ISO 9660 - CD-ROM
  • High-Performance File System (HPFS)
  • Yet Another Flash File System - Yaffs2

We Recover And Investigate Data From All Hard Disk Media Types, Including:

  • Personal computer (PC) 3.5" hard disk drives - SSD, IDE, EIDE, PATA, Fiber Channel, SATA, M.2 SATA, M.2 PCIe NVMe/AHCI, PCIe x16, Helium-Sealed Hard Drives
  • Laptop 2.5"/1.8" hard disk drives - Solid State Drive (SSD), IDE, SATA, ZIF, LIF, Fiber Channel and Micro SATA (mSATA), M.2 SATA, M.2 PCIe NVMe/AHCI, PCIe x16 and Apple MacBook
  • External 3.5"/2.5" hard disk drives - USB 1.0, USB 2.0, USB 3.0, Firewire, eSATA and Helium-filled drives
  • Server, RAID, NAS, SAN etc.
  • SCSI and SAS hard drives (including multi-boot, spanned, striped (RAID 0), mirrored (RAID 1), JBOD, RAID 2, RAID3, RAID4, RAID 5, RAID 6, RAID 10 and all other nested RAID configurations
  • All types of virtual machines and volumes
  • RLL, MFM, ST hard disk
  • ESDI
  • PCMCIA

We Recover And Investigate Data From These And All Other Crashed Drive Symptoms And Error Messages:

Some everyday situations and error messages that would suggest that your drive might be suffering from one or more failures or other potential data loss scenarios:

  • Your hard drive is no longer recognized by the operating system or BIOS. 
  • Your hard drive was detected by the BIOS/operating system but reported as unreadable.
  • Your hard drive makes strange/funny sounds when power is applied.
  • The hard disk drive is not spinning despite power being applied.
  • Primary hard disk failure / Secondary hard disk failure.
  • Cannot read from the source file or disk
  • Inaccessible boot device.
  • Unable to access drive "X".
  • Disk error: press any key.
  • The device is not ready, reading drive "X".
  • Operating system not found/missing operating system.
  • The BIOS recognizes the drive but with garbage parameters.
  • The BIOS recognizes the drive, but the data is inaccessible.
  • The drive reports bad sectors.
  • NTLDR is missing; press any key to restart.
  • Replace the disk and press any key to continue.
  • The drive reads some data but reports cyclic redundancy checking (crc) errors.

See Also
Data Recovery vs Forensic Data Recovery vs Forensic Investigation?
Why do storage devices fail and other causes of data loss?