Uluslararası İnsan Bilimleri Dergisi

 
6. Kaynakça 
ACE Laboratory Ltd. (Russia). (2013). PC-3000 UDMA Manuals. 
Engel K. (2006). Oberlin Smith and the Invention of Magnetic Sound Recording. The essay “An 
Inventor is Discovered” is the enlarged and up-to-date version of a publication titled A 
Hundred Years of Magnetic Sound Recording, 
Journal of Audio Engineering Society
, 36(3), 170 
– 178. March 1989.
E.Y.K. Ng, N.Y. Liu ve Y.C.M. Tan - Structure Optimization Study of Hard Disk Drives to 
Reduce Flow-Induced Vibration, 2011 
Gyu Sang Choi, Ingyu Lee, Mankyu Sung, Choongjae Im (2012). A hybrid SSD with PRAM and 
NAND Flash memory , 
Microprocessors and Microsystems
, 36(3), 257-266. 
http://www.donordrives.com/hard-drive-pcb-donor-match , Erişim Tarihi: 01/06/2014 
Korb S. (2006). Head Stack Replacement: Questions and Answers, hddguru.com 
http://hddguru.com/articles/2006.02.17-Changing-headstack-Q-and-A/ 
Mamun A., Guo G. BiHard C. (2007). Hard Disk Drive Mechatronics and Control, CRC Press. Pp 
355. 
Sammons J. (2012). The Basics of Digital Forensics, The primer for getting Started in Dijital 
Forensics. Elsevier. pp 173.
Lyle J.R. (2003). NIST CFTT: Testing Disk Imaging Tools. 
International Journal of Digital Evidence
1(4):1-10.
Woods, Kam and Christopher A. Lee. (2012). Acquisition and Processing of Disk Images to 
Further Archival Goals. In Proceedings of Archiving 2012 (Springfield, VA: Society for 
Imaging Science and Technology, 147-152. 
Çakır, H. and Sert E. (2010). Bilişim Suçları Delillendirme Süreçleri, 2. Uluslararası Terörizm ve 
Sınıraşan Suçlar Sempozyumu, 6-7 Aralık 2010. 
Schroeder, B. and Gibson, G.A. (2007). Disk failures in the real world: What does an MTTF of 
1,000,000 hours mean to you? 5th USENIX Conference on File and Storage Technologies, 
San Jose, CA, Feb. 14-16, 2007. 
Flandrin, F., Buchanan, W., Macfarlane, R., Ramsay, B., Smales, A. (2014). Evaluating Digital 
Forensic Tools (DFTs). In: 7th International Conference : Cybercrime Forensics Education 
& Training 
Extended English Abstract
 
Since the acceptation of digital data as evidence in courts, hard disks have been the most studied 
objects within a digital forensic examination. Hard disk drives are most preferred devices as data 
storage unit, because of their current advantageous price / capacity ratio. Therefore, these are 
examined by forensic investigation units related to committed crimes. 
Examinations of the hard disk drives are done with computer forensics software and hardware. 
However, computer forensics software and hardware are designed for running devices. For this 
reason, with this type of computer forensics software and hardware, it is not possible to examine 
the not working hard disk drives. It is a must to do data recovery and acquire data before making a 
forensic examination. 

---

Güllüce, Y. Z., & Benzer, R. (2015). Adli bilişimde hard disk arızaları ve arızalı disklerden veri kurtarma yöntemleri. 
International Journal of Human Sciences
, 
12
(1), 206-225. doi: 
10.14687/ijhs.v12i1.3115
 
225 
Data recovery is the recovery process of digital data from damaged, corrupted or inaccessible 
medias due to another cause which cannot be accessed in the normal way. Data recovery term in 
digital forensics literature is generally used for obtaining deleted, hidden or encrypted data. 
However, the term of data recovery in this article has been used in a more inclusive way. Detailed 
description of two different perspectives of data recovery will be made under logical a physical data 
recovery titles. 
Physical or logical problems may be the cause of inaccessibility of data in the recording media. 
Logical problem is the state of inability to reach data, although the recording media or the device 
which stores data works normally. For example, file system damage, in a conscious way or 
accidentally deleted files by users, password protected data and crypto may be logical reasons of 
inaccessibility of data. On the other hand, physical malfunctions bring to mind the differing types 
of failures depending on the recording medium. Therefore, for the hard disks, head crash, stucked 
motor, bad sectors or electronic problems can be described as physical reasons of inaccessibility of 
data. In the article, physical failures that may occur in the hard disk drives are mentioned and 
solutions to them are presented. 
In this article, data recovery types have been described in two categories. First of these types is data 
recovery according to fault sources. There are two types of data recovery type in this category; 
physical and logical, both of them described above. In addition, data recovery types can be 
determined by recording technology types. In this paper, data recovery types according to the
recording technology described as; data recovery from media that uses magnetic reading and 
writing technology, data recovery from media that uses optical data reading and writing 
technology, data recovery from media that uses electronic data reading and writing technology. 
Then the basic components of the hard disk drives are described. Major components can be listed 
as printed circuit card (PCB), motor, platter (one or more than one) and read-write heads (MR 
heads). Printed Circuit Board is the electronic card that has the microcontroller or microprocessor, 
power units, connection interface such as PATA, SATA or USB and on a variety of electronic 
products. The motor rotates platters. So rotation in a munite (RPM) of the platters can be 5400, 
7200 or etc. The read-write head makes the reading and writing to one or both sides of each platter. 
Platters are the parts where read and write heads write on. In this way platters stores data.
Malfunctions occurring in hard disk drives are identified in five general fault types; PCB failures, 
read and write heads problems, motor failures, damaged platters and firmware bugs. Firmware is 
main code that control physical components of hard disk drives. So if firmware does not work 
properly, it is impossible to reach data generally. In article, after identifying failures, solutions for 
these problems are explained. PCB failures usually be repaired by replacing a card that is compatible 
and working with the problematic card or repairing the printed circuit board. However, it is not 
enough just to replace PCB in modern hard disk drives. How this is done is described in the article. 
In read and write heads problems, if there are more than one read-write head, first reading data 
from working heads should be tried. If the requested data cannot be recovered and there is nothing 
to do but head replacement, it should be done with a compatible and working one. In damaged 
platters, it is experienced partial loss of data generally. However, doing logical data recovery process 
based on these recovered data from undamaged parts of platters increases the success of data 
recovery. In motor failures, platters are usually moved to a working hard disk drive. For firmware 
bugs, they can be solved by sending commands through the programs that can access the firmware. 
The purpose of this article is to explain how to recover data from a hard disk which is corrupted 
due to any reason. Prior to that, data recovery concept, data recovery types, physical structure of 
modern hard disk drives we use today and its internal components will be described, then 
encountered failures and intervention methods to the hard disk drives will be explained.
View publication stats
View publication stats