[plug] OT: HHD recovery (DoD 5220-22 M wipe)

[Bernd Felsche]

On Wed, Dec 10, 2003 at 08:23:02AM +0800, Peter Wilsmore wrote:
> I know this is OT but does anyone know of any REALLY good data
> recovery specialists that might be able to recover a drive that
> has had 5% of a DoD 5220-22 M run on it (should have only done
> part of the first pass).  We have already had someone to a
> blockwise read from the drive and try to piece together the
> unwiped data who was unable to recover anything useful.

Have you looked at http://www.sleuthkit.org/ ?

Used by DSD
	http://www.dsd.gov.au/library/software/flag/index.html

They even provide a CD-bootable, Knoppix-based ISO image.

If you've dd'd an image into a file, then you can play with it to
your heart's content.

-- 
/"\ Bernd Felsche - Innovative Reckoning, Perth, Western Australia
\ /  ASCII ribbon campaign | I'm a .signature virus!
 X   against HTML mail     | Copy me into your ~/.signature
/ \  and postings          | to help me spread!