Computer evidence analysis and recovery of magnetic storage media data

Abstract

The recovery of data that were stored on magnetic media normally poses no problems if the same hardware is used to recover the data that was used to store it on the medium. This is not the case if the magnetic information or the storage media itself have been damaged. If the hardware or software system used to store the data on the media is unknown, then this must be determined by initial analysis. Once the storage format has been analysed and is known, the storage media can then be read using the appropriate equipment. If it is unknown or the storage media is damaged, one can try to recover the data using laboratory measures. The paper describes the possibilities for analysis and recovery. The main emphasis is laid on the technical problem of making the magnetically stored information available as digital data.