WDR Training

IEHF Certified Windows Data Recovery Expert

Course Structure
Entery Requirements

Data Recovery is the process of salvaging data from damaged, failed, corrupted, or inaccessible secondary storage media when it cannot be accessed normally. Often the data are being salvaged from storage media such as internal or external hard disk drives, solid-state drives (SSD), USB flash drive, storage tapes, CDs, DVDs, RAID, and other electronics. Recovery may be required due to physical damage to the storage device or logical damage to the file system that prevents it from being mounted by the host operating system.

The most common "Data Recovery" scenario involves an operating system (OS) failure (typically on a single-disk, single-partition, single-OS system), in which case the goal is simply to copy all wanted files to another disk. This can be easily accomplished using a Live CD, many of which provide a means to mount the system drive and backup disks or removable media, and to move the files from the system disk to the backup media with a file manager or optical disc authoring software. Such cases can often be mitigated by disk partitioning and consistently storing valuable data files (or copies of them) on a different partition from the replaceable OS system files.

In some cases, data on a hard drive can be unreadable due to damage to the partition table or filesystem, or to (intermittent) media errors. In the majority of these cases, at least a portion of the original data can be recovered by repairing the damaged partition table or filesystem using specialized data recovery software. Data recovery can be performed by people without expertise in drive hardware, as it requires no special physical equipment or access to platters. Sometimes data can be recovered using relatively simple methods and tools; more serious cases can require expert intervention, particularly if parts of files are irrecoverable.

List of Modules

Module 01: Introduction to Data
  • What is Data
  • Need of Data
  • Types of Windows OS
  • Types of File System on Windows
Module 02: File Recovery
  • Introduction
  • Scanning a Drive for Deleted Files & Folders
  • Searching for Deleted Files and Folders
  • Restoring Deleted Files and Folders
  • HDD Basics, MBR and Partition Table
  • FAT File System
  • NTFS File System
  • Partition Recovery Process
Module 03: Partition Recovery
  • Introduction
  • Locating Deleted Data and Partition
  • Restoring of Partition
  • Disk Image Creation
  • Deleting Data Permanently
  • Password Changing
Module 04: Hard Disk Monitoring
  • Introduction
  • Viewing HDD Information
  • Scanning Disk and Viewing Event Logs
  • Disk Editing
Module 05: Imaging HDD
  • Introduction
  • Uses
  • Disk or Partion Imaging
  • Creating Raw Disk Image
  • Verifying Disk Image
  • Restoring a Disk Image
  • Viewing and Restoring Files
  • Cloning Disk
  • Viewing Log File


  • Security Officers
  • Auditors
  • Network Administrators
  • Firewall Administrators
  • Security Professionals
  • Penetration Testers
  • Anyone who is concerned about the integrity of the network infrastructure

Theory Exam Info

  • Number of Questions: 35
  • Passing Score: 70%
  • Test Duration: 45 Mins
  • Test Format: Multiple Choice

Lab Exam Info

  • Number of Questions: 2
  • Passing Score: 50%
  • Test Duration: 30 Mins
  • Test Format: Pratical

Study Material

  • eBooks and Original Software and License in the Name of Student


  • 30 Hours / 1 Months

Course reviews
  1. 4.00 out of 5

    Milan Sen

    The instructor is well versed in the attack/scanning techniques and mitigation steps.