Will ghost also image deleted files?

If an image is taken of a drive that had files accidentally deleted and that image is then restored onto a fresh hard drive, will Ghost also move the remains of the deleted files onto the new drive so GetDataBack or a similar data recovery application can be run from there as opposed to working on the only "live" copy of the original volume?
JsmplyAsked:
Who is Participating?
 
Neil RussellTechnical Development LeadCommented:
Have a read of the following very good article on forensics and Ghost.
http://www.forensickb.com/2008/03/ghost-as-forensic-tool.html
0
 
Neil RussellTechnical Development LeadCommented:
A full disk image with ghost is exactly that, A FULL DISK image.
0
 
JsmplyAuthor Commented:
Thanks.  So the disk would have to be imaged instead of individual partitions, correct?
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
Gary CaseRetiredCommented:
Most imaging utilities -- Ghost included -- have a "sector-by-sector" mode that does NOT use compression and does not skip unallocated areas (as they do in normal use).

With Ghost, you have to use the -ID or -IR switches to force this ... but when you use those, you can indeed do what you've asked.

Note that a normal "full disk image" is NOT a true bit-by-bit image unless you use one of those switches.     It is simply an image of the entire disk structure ... but will do the normal compression and unallocated "skipping" to minimize the size of the image.
0
 
Neil RussellTechnical Development LeadCommented:
And that is exactly what the article i pointed you to explains in great depth :D
0
 
noxchoGlobal Support CoordinatorCommented:
you can use sector per sector copy/clone of this drive. This will write directly each sector to second HDD. This should work faster than backup and recovery.
0
 
JsmplyAuthor Commented:
Thx all
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.