480 likes | 1.43k Views
Cyber Forensics. INDEX Definition of “Cyber Forensics” Definition of “Formatting” Types of Formatting Computer forensic recovery Whatsapp forensic recovery. Cyber forensics. Definition:
E N D
Cyber Forensics • INDEX • Definition of “Cyber Forensics” • Definition of “Formatting” • Types of Formatting • Computer forensic recovery • Whatsapp forensic recovery
Cyber forensics • Definition: “Cyber Forensics can be defined as a process of retrieving back the evidences deleted by the criminal from hard disk, pen drive, memory card, laptop disks, portable hard disk etc etc...”
Formatting • Definition: • It is a process in which , the data present in memory are deleted. • It also can be described as a process in which data is deleted from the memory for inserting new data in the memory . • Hard disk, pen drive, memory card etc are the examples of memory based devices. These devices can be formatted.
The process takes place in two manners:- • Recoveringthe deleted data • In case of damage sorting the data from a scrambled form.
There are three important things in a memory based device : • Index • Application Name • Size Example: Index Application Size 1001001 Movie.avi 770mb 1001002 Pics.jpg 30kb
Types of formatting • Quick Formatting • Complete Formatting
Quick Formatting • Quick formatting will be very quick and after when its done your OS will not show you any content of the pen-drive . • Hence we think data is deleted but in reality data is always there in quick formatting, • Its only Index is gone, and when index is gone then windows OS can not determine the location of file and hence will say its empty.
Complete Formatting • It will delete both index and data. • In complete formatting, the data and index of the data both are completely deleted. • Hence it takes more time as compare to quick formatting.
Computer Forensic Recovery • We can recover data from Hard disk, pen-drives, memory cards, mobile storages etc etc.... • Tool for recover data: “Easus Data Recovery Professional”
Continue...... • Can recovery up to 7 days of the chat because after 7 days backup whats-app delete the logs from your storage.
Steps For Recover messages • Go to website www.recovermessages.com • Select the Msql file from the memory card and upload it. • Get the data including videos and sms and songs etc.
Surprise Gift... • So that whats-app recovery only recover messages up to 7 days. • But now what, if we want to recover all messages?????????????? • So its for you guys just check it out on this link: • http://www.scribd.com/doc/155936401/Whatsapp-Decryption?secret_password=1pdmetminm3yzczs0owu
Presented By: Anubhav Sharma Follow Me On:http://www.twitter.com/anubhavlyrics Or Contact Me At: officialanubhavsharma@gmail.com Credits: MR. Rahul Tyagi