Disk Imaging Interrogation
By:Celeste Yates
Words such as forensic, analysis, evaluation, and bureau are usually just associated with crime lab series on T.V. But it seems that the real guys are taking a lesson or two from the old television and are upping their systems with technology. Even better, a lot of these systems, or versions of them, are available to the public. Some of the systems might seem like old news to a lot of people, such as programs to work disk imaging. According to reports from the Defence Cyber Crime Institute, there are programs specially made to enable law enforcement and government to retrieve data using the disk imaging process. Ilook Forensics is one of these programs, specially built for the variety of institutes to be able to retrieve data off hard drives. The imagination runs off to crime scenes, with CSI (Crime Scene Investigation Unit) walking about the place, dusting for prints and using ultra violet lights to pick up unusual substances. Hard drives are, for most people, a storage place for useful information about a person, so it would make sense for them to dissect it. Generally, for the rest of society, disk imaging is a simple process that computer users use to create back-ups of their hard-drive. It is a file, usually an ISO that contains a complete replica of your hard drive at that particular moment when you create it. A good hypothetical example would be like taking a photo. Just like that photo recreates that point of time, so does a disk image file. You would need special software to be able to do it and it is vital to not store the back up on the same disk. The point would be to be able to retrieve the information on the occasion that your hard disk was damaged. If the back up were on the disk that was damaged, there wouldn?t be too much of a point. The problem with creating it as an ISO file, is that the backup will not be able to support multi-track data or audio files. However, there are other options that can. There are three main types of Hard Disk Imaging, the first being Forensic Imaging where the entire hard drive is imaged to a file. The second is called Drive Cloning where the data is used to replicate contents of the hard drive for another system. And the Third is Data Recovery Imaging. This is similar to Forensic Imaging, but without the use of an image file. This is usual for business and computer users in general, as in the case of a computer crashing, or information being lost, having a disk image file will ensure that the data recovery experts will have a higher success rate of being able to retrieve the information. Technology is reaching a point where the average person can use it and understand the value of it. For years we used to hear nerds and geeks giggling away with their devices wondering why they thought it was cool. Now we not only know, but we know how to use it. Celeste writes for Data Detect, who specialise in Data Recovery in Australia.

