WinHex is a forensics tool that allows users to examine running programs, wipe confidential files or unused space, and perform drive imaging or drive cloning.
In this screencast, Peter Giannoulis of http://theacademy.ca zeroes in on one of the product's main functions and shows you how WinHex can recover deleted folders and lost data.
For more information about data recovery and forensics:
- Peter Gianoullis explains why data leak prevention tools may be another effective weapon against identity thieves.
- Learn how a "forensics mindset" can make life easier for investigators.
The Windows registry can be used to investigate employee activity or track the whereabouts of important corporate files. Ed Skoudis shows you how.
Want more screencasts? Make sure to check out our other demonstrations of today's security tools.
About the author:
Peter Giannoulis, GSEC, GCIH, GCIA, GCFA, GCFW, GREM, CISSP, is an information security consultant in Toronto, Ontario. He currently maintains www.theacademy.ca, which provides organizations streaming video on how to configure and troubleshoot many of today's top security products. He also serves as a technical director for GIAC.
Dig deeper on Data Loss Prevention