LDS recovers drive images to help police investigation

Objective

The aim for LDS was to provide drive images from HDD, SSD, and USB sticks that could not be accessed by the Police Digital Forensic Unit. These were part of a high profile case conducted by a large UK Police force and its Serious Crimes department.

Process

LDS worked on 21 data-bearing devices, most of which were seriously damaged, some intentionally, some through long term storage in a damp environment. The devices ranged from items manufactured in 1992 to the present.

LDS used its physical data recovery expertise to provide repair the items to a point where a bit by bit image could be extracted. This included:

  • Head change recovery using donor parts
  • Chip off recovery
  • Board repair at component level
  • Micro-soldering
  • HDD chassis change
  • HDD motor work
  • Interface correction
  • Removal of water damage and related corrosion

From 21 devices that had previously been damaged, and worked on by technicians at the Police, LDS managed to provide good forensic images on 13 devices.

The process included:

  • Secure collection
  • Secure and traceable lab practice
  • Physical data recovery work to obtain images
  • Daily reporting
  • Images provided as per the Police requirements
  • Secure delivery of original devices and images

Outcome

The Police DFU were pleasantly surprised with the outcome of so many images from such damaged drives, and very pleased with the customer service and competitive pricing provided.

A validation of LDS engineers data recovery skills to then enable images to be provided for investigation by Police Digital Analysts.

Share this page