Stellar Phoenix FAT & NTFS
July 21, 2005
Stellar Information SystemsProduct:
- Ease of Use:
- Value for Money:
- Overall Rating:
Fast, simple and effective: does exactly what it says.
No support for non-Windows file systems, limited searching.
Quick and powerful tool for recovering lost Windows data.
Stellar Phoenix is a product aimed at data recovery, rather than strict forensics, although of course recovery is an important part of incident response. Confronted with a disk with damaged or missing data, the software will attempt to recover information and reconstruct partial data.
Like several other products in this space, Stellar Phoenix requires a security dongle (in this case, an Aladdin HASP device) before it will run. In addition, the local user must have at least power user privileges, preventing normal users from using the software to access files they should not.
Phoenix is very simple to use, with a familiar Windows file-explorer type interface. The first step is to identify a target drive, partition or logical drive (the software will scan drives for partition information).
The system only works on physically connected devices, not on disk images, which is a shame. But given its primary purpose is a data recovery tool not a forensic product, this was not unexpected.
Once a target drive is identified, Phoenix scans the drive for files and folders, including fragments outside the file allocation tables, lost partitions, and data on formatted drives. It does this very quickly, although it might take a lot longer on a seriously damaged drive, particularly if there is any physical damage.
With the tree of data ready to go, files and folders are marked for recovery by ticking a check box in the tree view.
One click of the mouse, and recovery begins, with a prompt for where to store the data on the system's home filesystem. With our sample data, this was very quick, even with hefty chunks of information to restore.
There are some limitations to the product which count against it. Only Windows file systems can be examined (Stellar has separate products for other file systems), and file searching is primitive.
In addition, with only limited auditing and no hashing at all, we would suggest that you use this in conjunction with another forensic file recovery tool. But we really like the clean interface and quick performance of the software.
As a product with a specific task to accomplish, Stellar Phoenix does the job very well.
SC Webcasts UK
Information Security Manager
Infosec People - Hammersmith, West London
Junior Penetration Tester, Hertfordshire, to £35k + benefits
Infosec People - England, Hertfordshire
Cyber Security Architect
CYBER EXECS - London (Greater)
SOC Analyst, Aldershot, £47-56k + package
Infosec People - Hampshire, England, Aldershot
Senior Security Engineer
Loveworklife Recruitment - United Kingdom
Sign up to our newsletters
SC Magazine UK Articles
- Tesco Bank allegedly ignored warnings of hack from Visa
- Investigatory Powers and Digital Economy Bills could threaten economy
- Updated: A million German routers knocked offline by failed Mirai botnet attack
- Gooligan ad fraud malware infects 1.3M Android users, installs over 2M unwanted apps
- Microsoft update left Azure Linux virtual machines open to hacking
- SC Awards Europe 2016 winners announcements!
- ISIS radicalises 'lone wolves' through strong social media presence
- Updated: How will Brexit affect the cyber-security industry in UK and Europe?
- 9.2 million medical records for sale on darkweb
- Microsoft Office 365 hit with massive Cerber ransomware attack, report
- The information security implications of M&A deals
- Cyber-security must reflect risk not just regulation
- ICYMI: Tesco warned; IP Bill threatens economy; German routers offline; Azure trojan; Gooligan fraud
- Data centres are on the move - where will they end up?
- 90% of ITDMs believe IAM is crucial to digital transformation success