I did try getting my tool to re-create the file path. The issue is, that with the 2,000,000 records that were usually extracted, it took ages!

I may look at re-doing this in the future or a newer v ...

I do have a tool that will recover all records from a disk, deleted and live.
Its usually used internally here, but I'll make it available to those who want it.
As a general rule, I get at least x2- ...

I thought that the $usnjrnl (and by association $J ADS) were not included as part of the volume shadow copies.
If that is the case, then it should give you the same data as the one from the current s ...

See here:
https://support.magnetforensics.com/s/article/New-in-Magnet-AXIOM-3-7-0-16279

My understanding of reverse disk imaging is to do with caching of sectors.

AFAIK, When a disk reads sequentially it caches the sectors after it in anticipation. Where a disk is damaged, this can ca ...

No. Carving is a process for purely finding data based of attributes of data (header/footer) etc.

Deleted file recovery uses metadata to recover files and this may provide that information, even if ...

[quote="trewmte"]
The FSR Guidance does refer to analysis but nothing for digital forensics. Moreover, the Guidance refers to experience and expertise in the subject matter, not testing or calibratio ...