Don't Get Caught! How to Protect Your Hard Drives from Data Forensics « Null Byte :: WonderHowTo

With themass arrests of 25 anonsin Europe and South America, and the rumors of an FBI sweep on the east coast of America floating around, times look dicey for hackers. Over the past few days, a lot of questions have been posed to me about removing sensitive data from hard drives. Ideas seem to range from magnets to microwaves and a lot of things in-between. So, I'd like to explain a little bit about data forensics, how it works, and the steps you can take to be safe.Often, an anon will delete files from his computer, but that is only half the story, as those files are still really there. And if the careless anon doesn't take steps to fix that, when his door gets kicked in and the FBI takes his hard drive, they will be able to see everything. Don't be that anon.What Is Computer Forensics? The People on 'CSI'?Computer forensics is the collection, preservation, analysis and presentation of computer-related evidence.In summary, it helps determine thewho,what,where, andwhenrelated to a computer-based crime or violation. When the feds are finished arresting you and boxing up your belongings into evidence crates, they will ship them off to the FBI data lab in Washington, D.C.In addition, an examiner will work to uncover all files on the subject's system. This includes existing active, invisible, deleted, hidden, password-protected, and encrypted files. In many cases, information is gathered during a computer forensics investigation that is not typically available or viewable by the average computer user, such as fragments of data that can be found in the space allocated for existing files (known as "slack space"). Special skills and tools are needed to obtain this type of information or evidence.An expert can recover pretty much all of your deleted files, along with other data that has not yet been overwritten. As a computer is used, the operating system is constantly writing data to the hard drive. From time to time, the OS will save new data on a hard drive by overwriting data that exists on the drive, but is no longer needed by the operating system, i.e. a deleted file.  So, the ongoing use of a computer system may destroy data that could have been extracted before being overwritten.How to Protect YourselfWhile erasing files simply marks file space as available for reuse, data-wiping overwrites all data space on a storage device, replacing useful data with garbage data. Depending upon the method used, the overwrite data could be zeros (also known as "zero-fill") or could be various random patterns. This is why simply deleting information is never enough. You must take proactive steps to ensure your removal is complete.We are going to use a great boot disk calledDBANto perform this operation.Step1Obtain and Burn DBANYou candownloadthe 2.2.6 Beta release from Sourceforge. Once you have the .ISO, all that's left to do is burn it to a blank CD/DVD. Place the media into your drive and restart the computer. Most computers are set to try and boot from the CD drive before the hard disk. If this is not the case, and your computer does not boot the CD drive, you will need to enter your BIOS setup and change the boot priority order.Step2Boot and Run!After the CD starts, you will be greeted with this screen:We want to simply press enter here to start DBAN in interactive mode. The main menu shown below should display your hard drive to be wiped.The next screen shows us DBAN is ready to get down to work, the default method is a DoD Short wipe, and it will work fine for us.Hit the space bar to select and it will start. Be warned though, the DoD wipe takes a bit of time, especially on larger hard drives. But not as long as a prison sentence would be.In ClosingDBAM is a great tool to clean a hard drive. I carry a copy of it in my laptop bag when I travel and you should do the same. It is quick and easy and works better then most other tools I have used. Be careful as (obviously) it is impossible to recover if you zap the wrong hard drive!Questions? Comments? Shoot me a line here, inour forums, or on ourIRC2P channel(#nullbyte).Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseImages bysnapfiles,DTIdata,FinalForensicsRelatedHack Like a Pro:Digital Forensics for the Aspiring Hacker, Part 1 (Tools & Techniques)Hack Like a Pro:Digital Forensics Using Kali, Part 2 (Acquiring a Hard Drive Image for Analysis)SPLOIT:Forensics with Metasploit ~ ( Recovering Deleted Files )How To:Become a Computer Forensics Pro with This $29 TrainingHacking Windows 10:How to Find Sensitive & 'Deleted' Files RemotelyHack Like a Pro:Digital Forensics for the Aspiring Hacker, Part 14 (Live Memory Forensics)How To:Lock Your Files & Create Password-Protected Folders in Windows 7/8How To:Install an Off-the-Shelf Hard Drive in an Xbox 360 (Get 10x the GB for Your Money)Hack Like a Pro:Digital Forensics for the Aspiring Hacker, Part 11 (Using Splunk)Hack Like a Pro:Digital Forensics Using Kali, Part 1 (The Tools of a Forensic Investigator)Hack Like a Pro:Linux Basics for the Aspiring Hacker, Part 20 (Devices Files)How To:Revive a Dead Hard DriveHow To:Back up your data to an external hard driveHow To:Linux Basics for the Aspiring Hacker: Managing Hard DrivesHow To:Diagnose a hard drive problem and choose the right data recovery serviceHow To:Protect your data with BitLocker Drive Encryption on Windows 7How To:Completely erase a computer hard drive to remove all private dataHack Like a Pro:Digital Forensics Using Kali, Part 3 (Creating Cases in Autopsy & Sleuth Kit)Secure Your Computer, Part 3:Encrypt Your HDD/SSD to Prevent Data TheftHow To:Backup All of Your Xbox 360 Data to Your ComputerHow To:Conceal a USB Flash Drive in Everyday ItemsSecure Your Computer, Part 1:Password-Protect your BIOS Boot ScreenRemove Your Online Identity:The Ultimate Guide to Anonymity and Security on the InternetNews:Virtualization Using KVMHow To:Bypass Windows and Linux PasswordsHow To:Permanently Delete Files to Protect Privacy and PasswordsHow To:Mix a Don DraperNews:The Dance of the Hemispherical Water Droplets: Sound Waves in SpaceNews:Should Kids Be Allowed to Use Facebook and Google+?How To:Use Darik's Boot and Nuke (DBAN) to wipe a hard driveSecure Your Computer, Part 4:Use Encryption to Make a Hidden Operating SystemNews:10 Clever Uses for SugruHow To:How A Computer WorksNews:Don's Bad Ass pico DegalloHow To:Fix or Retrieve Data From A Bad Hard DriveNews:quarter prankNews:How-To-Maintain your PCHow To:Read Your Own Palm LinesNews:I Hope This Doesn't Catch On...News:Don Williamson's Real-Time Web-Based DCPU-16 Emulator & ASM Code Editor