Do you ever feel stuck in your day-to-day data recovery work? Or, maybe you need the PC-3000 certification to advance your career?

If you answer 'Yes' to any of these questions and live in North America, we have good news for you! The schedule for the regular PC-3000 Data Recovery Training in Norwalk, CT, the USA, has been updated.

These classes are your chance to learn data recovery techniques faster, accelerate your progress with unique practical exercises and be prepared for almost all data recovery challenges. By attending the training, you will not only get the instructions on how to extract data from particular storage media devices but understand the core of the data recovery process. So it will be much easier for you to solve similar cases in your real life job.

This course will benefit data recovery engineers along with forensic examiners, detectives, investigators, information security professionals and law enforcement officers who specialize in digital forensics.

Ready to enrich your experience and get certified? Join the PC-3000 Training Courses in Norwalk, the USA:

Interested in arranging training at your facility? Then contact our Training Coordinator Jane.

This May, ACE Lab went to São Paulo, Brazil, to share its expertise in recovering data at the 4th INTERPOL Digital Forensics Experts Group Meeting which was held within the largest Forensic Sciences conference in Latin America - InterFORENSICS 2019. The events were conducted on May 21-24, 2019, in Frei Caneca Convention Center.

ACE Lab regularly attends the INTERPOL Digital Forensics Experts Group Meetings. This time was no exception and we gave the speech to over 100 forensic experts from 41 countries. The country members shared their experience in dealing with the latest challenges and developments in the digital forensics area.

Besides, our team took to the stage at the InterFORENSICS 2019 Conference as well. The presentation gathered a lot of attendees, indicating interest from digital forensics examiners, law enforcement agencies and academia members in Latin America. Roman Morozov provided his knowledge about the Media Cache (MC) in modern SMR Hard Disk Drives and its importance for forensics data recovery.

The thing is these drives use MC as an intermediate buffer to work with data. If the data portion transmitted via a single ATA command is less than half of the band, then the info will get into the Media Cache buffer before being written to the User Area of the HDD. Besides, as MC has a large volume (from 16 to 90GB), it may have data that user has been working on for a significant period of time – up to several months. Even if a criminal executes a complete erasing (e.g. filling with zeroes), it will be deleted on the User Area of the HDD, but Media Cache will still contain INFORMATION!

So, the session’s attendees found out how to view evidence stored in Media Cache and how to delete their own data from Media Cache for security reasons.

Summer is one of the best seasons for visiting Prague. The capital of the Czech Republic is especially beautiful when illuminated by bright lights of the summer days: narrow winding streets, flourishing city parks, fairy-tale castles… So why not to mix your holidays with business?

Come for the training, stay for the vacation!

▶ Build a foundation in data recovery from the variety of storage media
▶ Reinforce theory with hands-on exercises that help you "learn by doing" 
▶ Bring your own mind-breaking HDD, SSD, Flash and Monolith cases to the classes: you will be able to solve them under the supervision of our tutors or get useful tips on how to handle them when you get back to your lab
▶ Explore and enjoy the history and culture of the Czech Republic in your spare time

As a student, you will receive the best possible instruction and have the opportunity to ask questions that go beyond the scope of the course. As a tourist, you will get unforgettable experience and memories for a very long time.

*The dates given above are approximate. Actual dates may vary depending on the groups completeness.

Interested in arranging training at your facility? Contact our Training Coordinator Jane to get the details.

The following English, Japanese and Chinese software updates are released today:

• PC-3000 Express/UDMA-E/Portable Ver. 6.6.31
• Data Extractor Ver. 5.9.17
• Data Extractor RAID Edition Ver. 5.9.17

PC-3000 HDD (Express, UDMA, Portable)

WD Marvell

• The SA blocking access error for Boot-ROM mode has been fixed;
• Resource editor for ABA regions mode has been improved.

Seagate F3

• Added the HDD Device Fault State flag searching and reset in RAM possibility in the "HDD autoinitialization" and "Work with Flash ROM image file" options.

PC-3000 Kernel

• Errors have been fixed (If click 'NO' in Sector edit window).

Data Extractor

• You are now able to make a drive "offline" for all system disks, and not just USB drives;
• New notification messages during the copy creation added. More information added to the Data Extractor and Data Extractor RAID Edition manuals;
• Fixed an error during the shift searching procedure;
• Fixed a bug when the alternative map is filled incorrectly if data cloning rate is low;
• Improved ZFS parsing.

Data Extractor RAID Edition

• The entropy map processing (if it is enabled for a member) has been added to the "RAID member statistics" mode;
• Added method for determining RAID service blocks based on the entropy map;
• Added histograms for quick evaluation of the results in viewing the map statistics and on the form attribute selection when building a submap.

All authorized technical support users will get the latest software versions.
Please contact us to learn more on how to become an authorized technical support user and receive all of the recent PC-3000 Software Updates.

200attendees	50+countries	10hot topics
2new products		5case studies

On April 26, about 200 data recovery engineers and digital forensics experts from more than 50 countries converged in Prague, the Czech Republic, for the international ACE Lab Technology Conference on Data recovery & Digital Forensics 2019.

This year our conference was dedicated to the 25th anniversary of the PC-3000 Technology and the announcement of 2 new ACE Lab Products: PC-3000 Portable III and PC-3000 Mobile. These innovative solutions got a lot of interest from both data recovery and digital forensics communities.

PC-3000 Portable III is an all-new system for on-site HDD data recovery tasks. It brings many useful features to digital forensic experts as well as private data recovery companies whose customers’ data is too vulnerable to be taken out of premises. 2 SATA ports and 1 SATA/USB port ensure fast imaging of SATA/USB drives with the speed up to 360MB/s.

PC-3000 Mobile presents a new approach to data recovery from mobile devices. It offers a very efficient set of various instruments packed in one product and provides several approaches to getting data: high-level access by conventional means or in-depth research, which includes the disassembling of the storage media and Chip-Off methods.

GET MORE DETAILS  ON PC-3000 PORTABLE III	GET MORE DETAILS  ON PC-3000 MOBILE

More information about the new PC-3000 Portable III and PC-3000 Mobile products, as well as the launch time, will be revealed soon!

In addition to the announcement of new products, speakers presented other solutions and topics such as building ROM from the SA for WD Palmer, new supported families of Toshiba, Seagate Media Cache issues and solutions, new supported Solid State Drives along with new algorithms and translators for PC-3000 Flash, data recovery from APFS (FileVault, Fusion Drive), extracting data from deleted/lost virtual machines, getting data and evidence from inaccessible BitLocker encrypted partitions.

All these features and many others became available with the software update released on the conference day.

A big thank you to everyone who showed up at the ACE Lab Conference on Data Recovery & Digital Forensics 2019 and made it an outstanding success!  

Until next time!