Ethical Hacking Training at InfoSec Institute

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Computer Forensics Computer-Forensics
[Top] [All Lists]

Re: 5.25 Inch Disk Data Recovery

Subject: Re: 5.25 Inch Disk Data Recovery
Date: Fri, 27 Aug 2004 18:58:39 +0100 (GMT Daylight Time)
Sety

I am impressed and intrigued that someone was  still using an Apple II
recently enough for the disk content to be of forensic interest.

I did use an Apple II briefly in the early eighties. I seem to recall that
the disks were hardware sectored rather then the software sectoring we are
used to now. There was a ring of  holes punched in the disk media near the
centre and a hole in the envelope, which allowed an optical sensor to
detect the holes. The holes were used to identify the sectors.

I am not sure if a modern 5 1/4 drive could read these disk but you could
try a Google search
http://www.google.com/search?hl=en&ie=UTF-8&q=Apple+II+disk+format&btnG=Google+Search

http://home.swbell.net/rubywand/Csa2DSKETTE.html#001

These people claim to be able to convert most disk formats including apple
http://www.intermedia.uk.com/disklist.htm

I would be interested to hear  how you get on, if you can tell us.

Good luck


Richard Westlake

School of Crystallography, Birkbeck College, Malet Street, London WC1E 7HX
Tel: 020-7631-6859
----------------------------------------------------------------------
               Truth endures but spelling changes    --  Anon.
----------------------------------------------------------------------


On Mon, 23 Aug 2004, sety martin wrote:

Date: Mon, 23 Aug 2004 07:47:41 -0700 (PDT)
From: sety martin <wearing_a_greyhat@yahoo.com>
To: forensics@securityfocus.com
Subject: 5.25 Inch Disk Data Recovery

Hi all,

I would appreciate any help in trying to resolve a
problem I am having.

I am trying to recover data from some 5.25 inch disks.
 They came off an older Apple system. (Apple 2?).

I have tried using dd, Ghost, Encase, FTK, Winhex and
Norton Utilites to view/image these diskettes without
any success.

It is not clear to me if there is still valid data on
these disks.  My experience has shown me that data on
a 5.25 inch can get corrupted over time.  Does anyone
know if the tools above could successfully read these
disks?  I am using a 1.2 Mb drive.  If these tools
can't do the job, does anyone know of a definitive way
to get at this data using an x86 or Sun system?

Thanks all,

Sety


-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

<Prev in Thread] Current Thread [Next in Thread>