Ethical Hacking Training at InfoSec Institute

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Computer Forensics Computer-Forensics
[Top] [All Lists]

RE: 5.25 Inch Disk Data Recovery

Subject: RE: 5.25 Inch Disk Data Recovery
Date: Wed, 25 Aug 2004 18:06:49 +0100
Sety...

It is possible that the data on the disks may be corrupt, but it is also
possible that the disks are perfectly fine and that the old Mac 5.25"
drives work in the same way as the Mac 3.5" drives (ie they use variable
spindle speeds depending on the physical part of the disk being written
to).  In order to find out you're going to need to get hold of an old
Mac system with a 5.25" floppy drive in it (a floppy drive in a PC won't
work as they don't support variable spindle speeds) and then try to read
the disks.  

It's also possible that you might be able to read the disks using
Anadisk (from Sydex), but I've never tried that route.

Best of luck

Craig G Earnshaw
Head of Forensic Computing Services
Lee & Allen Consulting
London - New York - Hong Kong

-----Original Message-----
From: sety martin [mailto:wearing_a_greyhat@yahoo.com] 
Sent: 23 August 2004 15:48
To: forensics@securityfocus.com
Subject: 5.25 Inch Disk Data Recovery


Hi all,

I would appreciate any help in trying to resolve a
problem I am having.

I am trying to recover data from some 5.25 inch disks.
 They came off an older Apple system. (Apple 2?).

I have tried using dd, Ghost, Encase, FTK, Winhex and
Norton Utilites to view/image these diskettes without
any success.

It is not clear to me if there is still valid data on
these disks.  My experience has shown me that data on
a 5.25 inch can get corrupted over time.  Does anyone
know if the tools above could successfully read these
disks?  I am using a 1.2 Mb drive.  If these tools
can't do the job, does anyone know of a definitive way
to get at this data using an x86 or Sun system?

Thanks all,

Sety


                
_______________________________
Do you Yahoo!?
Win 1 of 4,000 free domain names from Yahoo! Enter now.
http://promotions.yahoo.com/goldrush

-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service. For
more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

<Prev in Thread] Current Thread [Next in Thread>