Notifications
Clear all
19/12/2007 12:17 am
When carving files you should not forget that the techniques used only give good results for non-fragmented files. If a file was saved in non consecutive clusters there is no carving technique I'm aware of that will be able to reconstruct the file without the filesystem metadata.
Page 2 / 2
Prev