Scan of the Month
Forensic Analysis of A Recovered Diskette

Conclusion





Information recovery from the floppy disk image used in this study requires a detailed knowledge of the file system data structures and the tools used to examine and extract disk image data. Solaris 2.5 utilities were used to verify the integrity of the image and to load the image onto a diskette for the data recovery and file system analysis. Both data recovery and the detailed analysis of file system data structures was accomplished using WinHex. WinHex was purchased for the work since it is not a Windows 98 SE standard utility.

The techniques used here are adequate for the data recovery and analysis of floppy diskettes.