From the course: Operating System Forensics

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Introduction to file recovery

Introduction to file recovery

- [Instructor] One of the major tasks of digital forensics investigators is to recover and preserve data. Special attention is necessary because deleted, damaged, or hidden files present substantial challenges. Tools and techniques for recovering files are available, and learning how to use them is necessary to pursue a digital forensics career. Salvaging deleted files could be as simple as using a free digital forensics software application like Autopsy, which automatically detects and displays them for recovery. If a software solution doesn't work, a manual approach, like data carving, provides a viable choice. You'll still need tools like software utilities, but you are expected to have the skills and insight to navigate through a file system and retrieve what you seek. This takes a higher level of training than using a fully-automated computer forensics software suite that does everything for you. What makes the job of a digital forensics specialist even more challenging is the…

Contents