FAQ — Data Recovery
Data recovery FAQ: answers to your questions
Find answers from our specialists to the most frequently asked questions about data recovery: hard drive failures, SSD, RAID, USB drives, pricing, turnaround times and process. SOS Data Recovery (Tesweb SA), Swiss specialist since 2006 with over 10,000 cases handled, answers your questions.
10,000+ cases handled since 2006
CyberSafe certified & nFADP compliant
Free diagnostic within 3 hours
Why consult our data recovery FAQ?
Our technicians answer the most frequently asked questions about hard drive, SSD, RAID, NAS, USB drive and memory card failures. Each answer is based on over 10,000 cases handled since 2006 and regularly updated. If you cannot find the answer to your question, contact us — free diagnosis within 3 hours.
What is the procedure for a digital forensic investigation at SOS Data Recovery?
Our forensic procedure follows a strict 5-step protocol:
- Reception and documentation — recording of the media with photos, serial number, physical condition observed. Issuance of a signed acknowledgment of receipt.
- Forensic acquisition — bit-by-bit cloning of the original media via a certified hardware write-blocker. Calculation of MD5 and SHA-256 hashes on the acquired image. The original media is never modified.
- Analysis — investigation on the working copy: recovery of deleted files, analysis of metadata, reconstruction of the activity timeline, identification of artifacts (logs, history, registry).
- Documentation — each action is recorded in a time-stamped log. Relevant files are extracted and cataloged.
- Expert report — detailed report including the methodology, tools used, results and conclusions, accompanied by digital attachments.