Data Recovery Comparative Analysis using Open-based Forensic Tools Source on Linux

Abstract

Data recovery is one of the forensic techniques used to recover data that has been lost or deleted. Data recovery is carried out if there is a condition where the data that has been owned is deleted or damaged. If the data has been lost or deleted or even tampered with, then a forensic expert has several ways to restore data that has been lost or damaged. One of them is to use a complete data recovery method using forensic tools, namely, TSK Recover, FTK Imager, Foremost Recover, and Testdisk Recover. Unfortunately, tools such as FTK imager and TSK recover have a weakness, namely that some damaged or corrupted data files cannot be restored in their entirety; they can only be recovered but not be opened. This study uses a tool comparison method approach using foremost recover and Testdisk recover. It's just that this method cannot be used using the graphic user interface (GUI) but using the CLI (Command Line) in the LINUX operating system. And the files that have been recovered will be fully recovered.

Analisis Digital Forensik Metadata pada Rekayasa Digital Image sebagai barang bukti Digital

“…Forensik digital merupakan kegiatan investigasi yang dilakukan dalam penanganan kasus kejahatan dunia maya. Menurut [3], Digital Forensik merupakan suatu proses ilmiah atau usaha ilmiah yang menggunakan prinsip-prinsip ilmu untuk mengumpulkan, menganalisis, dan menyajikan bukti dalam konteks proses pengadilan guna mendukung pengungkapan kejahatan. Hal ini dilakukan dengan memastikan bahwa bukti yang diungkapkan telah disahkan oleh hukum dan peraturan yang berlaku.…”