file carving Archives - Forensic Focus

A Contemporary Investigation of NTFS File Fragmentation

25th October 202119th October 2021

Hello, everybody. Greetings from the Netherlands and welcome to this presentation called “A Contemporary Investigation on NTFS File Fragmentation”. In the next 20 minutes, I will tell you all about the research and our paper, which has the same title… Read more

Walkthrough: Carving With Belkasoft Evidence Center

12th May 20203rd May 2019

by Yuri Gubanov, Danil Nikolaev & Igor Mikhailov © Belkasoft Research Carving is an irreplaceable technique widely used in data recovery and digital forensics. By using carving, we essentially perform a low-level scan of media for various artifacts, looking for… Read more

How To: Integrate LACE Carver With Griffeye Analyze DI Pro

14th May 20203rd December 2018

Let’s talk about the exciting new LACE Carver Integration with Analyze DI Pro. Once you have the proper license, you can head over to your Downloads page on MyGriffeye.com and go to the LACE Carver download. Once the app package… Read more

Digital Forensic Investigational Tool For Volatile Browser Based Data Analysis in Windows 8 OS

12th May 202022nd December 2016

by W.Chirath De Alwis, School of Computing, Asia Pacific Institute of Information Technology, Colombo, Sri Lanka Abstract Cyber security threats on sensitive resources have increased recently and it has increased the need for digital forensic analysis tools. Digital evidence can… Read more

Shrinking the gap: carving NTFS-compressed files

12th May 202018th July 2011

First published October 2009 Recovering deleted NTFS-compressed files By Joachim Metz Hoffmann Investigations www.hoffmannbv.nl 1.0 Joachim Metz September 2, 2009 Initial version. Summary An important part of digital forensic investigation is the recovery of data, particulary files. The recovery of… Read more