TonyC wrote:
jaclaz,
Yes, really. The KB Article I reference documents it for Vista. I discovered it as a result of some testing I did on Vista (when Vista was the current version of Windows). Some months after I did my testing I found the KB article that officially documented it.
I have not personally tested Windows 7 but I have been told by a couple of other forensic analysts that they have and the long format wipes the drive.
Seems to be something that is not well known. I try to mention it forensics analysts and data recovery specialists every chance I get. When I do, they usually look at me like I have 2 heads. I point them to the KB and suggest they do their own test.
TonyCSure <img src="images/smiles/icon_smile.gif" alt="Smile" title="Smile" /> , the point I was highlighting was simply that Ioften do the same and that specifically I already did it in this same thread, if you prefer, the "nobody mentioned" was NOT accurate, "jaclaz did".
JFYI, I learned it the "hard way"<img src="images/smiles/icon_eek.gif" alt="Shocked" title="Shocked" /> :
http://www.msfn.org/board/topic/135781-vista-quick-format-or-full-format-that-is-the-question/
And I try to mention the thing whenever the topic is touched <img src="images/smiles/icon_wink.gif" alt="Wink" title="Wink" /> :
http://www.forensicfocus.com/Forums/viewtopic/p=6565021/#6565021
http://www.forensicfocus.com/Forums/viewtopic/p=6563225/#6563225
http://www.forensicfocus.com/Forums/viewtopic/p=6560114/#6560114
http://www.forensicfocus.com/Forums/viewtopic/p=6538905/#6538905
And I can confirm for you that BOTH Windows 7 and 8 (i.e. "recent - since Vista") behave the same. (and though I havent' tested it yet, I see no reason why the 8.1 shoudl have changed).
jaclaz
↧