We first assess the Hard Disk Drive to check if it can be operated or can be accessed by our lab equipment. If this can be done, we mirror the data; create a raw image of the data to new media for further analysis. We do not perform hard disk recovery process on the original data. In situations where we cannot access the device or operate it, then it would indicate some failure in the physical components of the device; either a physical damage in mechanical failure of some component of the device or failure of some electrical component in the device.
In situations where, the drive is assessed for component failures, the hard disk drive is opened in our clean room facility, and the defective components are replaced, and then the mirroring of data is completed. Failed components usually include read/write heads, head assemblies, electronics, drive motors or magnets.
In situations where, the hard drive is assessed for logical or software driven failures, we start by examining the raw image at the low-level data sectors determining the need and applying fixes to filesystem structures so as to access the critical data. Sometimes the filesystem structures are missing entirely or damaged badly, and then we work with the fragments of the raw image. Our technicians work in this manner iteratively to restore whatever data can be redeemed.
After the data is recovered from hard disk drive, it is restored completely in its original format and checked for data validity and then stored in a separate media device like a CD-R and returned to the client.
More on Disk Recovery Services and Disk Recovery Services Guide
Submit a Case
