PC-3000 Flash Data Recovery Expert Training

by ACELabs
Home » Digital Forensic Training » ACELabs PC-3000 » PC-3000 Flash Expert

The aim of this training course is to provide you with deep understanding of Flash NAND data recovery. Our highly professional instructors will teach you how to handle damaged Flash drives more efficiently in practice exercises.

What you’ll Learn:

  • Essential skills of Flash Data Recovery from memory sticks, SD cards and other NAND-based storage devices
  • Official ACE Lab Data Recovery certification
  • Useful handouts

Flash Data Recovery Expert Training Overview

Day 1 Highlights

During the first day of training you are given a detailed review of NAND memory theory and its principles. PC-3000 Flash functionality is introduced and reviewed.

Day 2 Highlights

The second day is dedicated to help you understand each theoretical point as theory turns into examples of application. You are provided practice exercises with real cases. Every attendee has to solve numerous cases under the supervision of our instructors.

Day 3 Highlights

On the third day we extend your knowledge even further, strengthen it in practice and give you the complete picture of how to perform NAND data recovery and how to use the PC-3000 Flash in the most efficient way.

Day 4 Highlights

Even more practical tasks, a real case of chip-off recovery and learning modes for improving the NAND Memory chip reading and quality of the dump.

Course Curriculum

1. Introduction. Concept

  • Structure flowchart of NAND memory devices
  • Classification of damages of Flash memory based devices. Features

2. Memory chips

  • Types of memory chip cases
  • Memory chip internals
  • Memory chip identification. Degrees of importance
  • Characteristics of reading algorithm. SDR and DDR chips

3. Organization of information storage in NAND memory based drives

  • Tendencies in drive development
  • Page and Block in memory chip. Application
  • Memory Chip ID

4. PC-3000 Flash system

  • Structure and application<./li>
  • Main strategy and structure of PC-3000 Flash
  • Task structure

5. Stages of working on data recovery task

6. Reading of memory chip

  • Readout circuit chip dump
  • Reference memory chips
  • “Direct” readout chip. Application
  • What PC-3000 Flash can do during chip reading into dump

7. Block diagram of controller operation

8. Data preparation algorithm

  • Methods of data preparation:
  • Join by bytes
  • Bitwise inversion
  • XOR elimination
  • Page transformation
  • Internal Interleave elimination
  • External Interleave elimination
  • Additional operations

9. ECC. Bit error correction

  • Causes of errors
  • ECC type Auto detection
  • Additional ways of improving data quality result

10. Verification of applied data preparation steps

  • Raw Recovery
  • Verification of applied data preparation steps
  • Data preparation implementation. Ways to check if data preparation is done correctly

11. Algorithms of image generation

  • Block Number
  • Different types of markers
  • Translators
  • Image building based on data analysis

12. Data recovery in automatic mode

  • Global Solution Center
  • Additional research modes

13. Analysis and improvement of built image

    • Data quality analysis
    • Versions for block
    • Shifts between banks
    • Disk analysis
    • Partition analysis
    • Addition of virtual partition

 

Practice

At this training seminar you will be taught to solve wide variety of tasks: from the easiest to very complex and even unusual ones. Each attendee can choose difficulty level and try to solve this type of task. The technique of drive dismantling, memory chip unsoldering and their preparation for reading process will be demonstrated at training The training will take place on the last version of PC-3000 Flash. 

Upcoming Courses