Data Recovery and Digital Forensic Services South Africa
Specialised data recovery, forensic data recovery, digital forensic investigations, incident response and OSINT from almost all types of digital data storage devices and locations including working, and non-working servers, NAS and RAID volumes, personal computer (PC) and laptop hard disk drives (HDD), external hard drives, solid-state drives (SSD), mobile devices (smartphones, mobile phones tablets, PDA's and cellular phones), backup tapes (tape cartridges), CDs and DVDs, memory sticks (flash drives), SD cards, the surface web and the dark web.
This includes data recovery and digital forensics from dropped, fire, water and power-surge damaged, corrupted, formatted, virus infected, hacked and password-protected storage devices.
We strive to have the best possible solutions available to recover and investigate your data no matter the potential data loss scenario!
Our facilities include data recovery and data forensic specific test and repair tools, equipment and software, including a class 100 cleanroom for the stripping, rebuilding, recovery, and investigation of almost all types of electronic media. This, combined with a team of experienced professionals, working in a secure environment, under a non-disclosure, will give your data the best possible chance of being revived, investigated or destroyed, in full confidentiality, as fast and in a good a condition as possible.
HOW WOULD YOU BENEFIT & WHAT CAN YOU EXPECT FROM A RELATIONSHIP WITH US?
Having peace of mind that you are trusting your data in the hands of a company operating since 1999.
Professional, fast, friendly and efficient assistance throughout the investigation, recovery or destruction process.
Online Portal - Here you can view your quotations, invoices, correspondence, check the status of your ticket(s), add comments and attachments, approve (or decline) your quote(s) as well as create new ticket requests.
Regular work progress updates.
Free initial consultation with one of our experienced and competent technicians.
FREE COURIER COLLECTION AND DELIVERY SERVICE
Free courier collection for all pre-approved investigations and data recoveries and free courier return for all successful work.
No billable work will be undertaken unless a final quote is approved in writing.
OUR DATA GUARANTEE
No-recovery, no-charge (no-nonsense and no-surprises):
You will not be invoiced should we for some reason not be able to recover the data, or the data recovered not be in a usable condition.
You will be contacted, prior to us raising an invoice, to confirm the usability of the data recovered should we suspect damage to some of the data.
We can re-negotiate a price (less than the quoted amount) should some of the data recovered be of use to you with the option to proceed or not.
- Please Note:
We will do everything possible to rectify the recovery or refund the recovery charges (or a portion thereof) should we not be able to solve any valid issues with the recovered data.
All information, data, and equipment handed over, investigated or recovered by us will be protected from unauthorized access or disclosure using the same degree of care as we use to protect our own confidential information.:
Our staff members are professionals working in a secure environment having signed a non-disclosure agreement (NDA).
All data recovery work is done in-house unless otherwise agreed with yourself in writing.
We can also enter into a non-disclosure agreement (NDA) on request.
WHY DO STORAGE DEVICES FAIL AND OTHER CAUSES OF DATA LOSS!
Data loss can broadly be divided into two categories,Logical data loss (software related) and Electro-mechanical failure (hardware related).
Logical (software related) data loss - The device is mechanically working but suffers from a software issue.
The most common causes of logical data loss:
Formatted device - Formatting alone leaves the data areas (on a sector level) intact despite not being accessible via the operating system.
Operating system re-installation or reload - Data that was on the device, prior to reinstalling the operating system, and/or applications (with or without formatting) is normally intact (on a sector level).
Deleted file(s) and/or folder(s) - Accidental or intentionally deleted directories and/or files are normally intact (on a sector level).
Deleted or corrupt partition(s) - Deleting a partition alone leaves the data areas (on a sector level) intact despite not being accessible via the operating system.
Data corruption - could be due to number of factors including storage device quality, application quality (e.g. bad programming), memory quality, power stability, incorrectly shutting down devices or applications and incorrect ejection of removable drives.
Virus-infected or malware - Viruses and malware are malicious software applications that can delete, corrupt or encrypt your data for ransom.
Hacked - Can originate from inside or outside of your computer or network.
Data can in most cases be recovered and successfully investigated using specialised data recovery and forensic software unless the data areas have been compromised - overwritten, corrupted, encrypted or due to SSD trimming. The success rate would be dependent on the file sizes, file location and fragmentation before the potential data loss scenario, data activity after the incident and type of encryption. The best advice is to stop working, the moment you suspect data loss, and not to attempt to access the advice if you wish to have the best possible chance of recovering or investigation your data loss.
Electro-mechanical (Hardware Related) device failure refers to physical problems with your storage device.
The most common symptoms and causes of electro-mechanical failure:
Dead device.The device is not detected e.g. the hard drive fails to spin-up when power is applied. This is normally due to a damaged PCB (printed circuit board) caused by power fluctuations, surges or spikes as a result of a faulty power source, power failures, lightning and water, or other liquids.
Noisy hard drive. Clicking (clacking, knocking) or scratching noises are normally as a result of broken or damaged read/write heads (commonly referred to as a head crash), platter damage or firmware corruption.
Drive not spinning. The drive is making beeping or buzzing noises and when power is applied typically due to spindle motor seizure.
Drive spinning but not detected. This could be due to firmware corruption, damaged read/write heads or a faulty PCB.
Drive spinning up and down repeatedly. The drive spins up and down repeatedly when power is applied. This could be caused by faulty read/write heads, firmware failure or a faulty PCB.
An excessive number of bad sectors. The data on the drive is not accessible or the drive may struggle to read or write data. Typical indications could be Cyclic Redundancy Checking or CRC errors when reading or writing data or drive repeatedly runs a scan (scan disk) at start-up.
Drive contamination. Hard drives are extremely sensitive to contamination. This is one of the reasons we have a class 100 cleanroom where we can safely open hard drives without the risk of external contamination. Once a drive has been opened in a non-clean environment the risks for data loss increases substantially. We typical encounter fingerprints on the surface of the platters and/or dust contamination caused by D.I.Y. or other unskilled data recovery attempts.
Data can in most cases be recovered and successfully investigated using specialised data recovery and forensic software, tools and equipment unless the platters or magnetic field have been severely damaged. The most common reasons for electro-mechanical device failure includes failed components, rough handling (bumping or dropping), manufacturing and power source issues. The best advice is to stop working, the moment you suspect data loss, and not to attempt to access the advice if you wish to have the best possible chance of recovering or investigation your data loss.