In 2014, we launched our open-access repository which offers full text access to conference proceedings from many of our events including the INC and HAISA series. These papers are free to access and distribute (subject to citing the source).
4th International Annual Workshop on Digital Forensics & Incident Analysis (WDFIA 2009)
Title: A fast scheme for recovery of deleted files with evidential recording for digital forensics
Author(s): Kenan Kalajdzic, Ahmed Patel
Keywords: File Recovery, Evidence Collection, Tracing, Digital Forensics, Linux
Abstract: In this paper we present a practical method for recovery of deleted files from a locally accessible data storage, such as an HDD, with an optional recording of evidential information about the recovery process. Our approach puts strong emphasis on the practical aspect of file recovery and evidence recording as well as the accessibility of the required tools. This makes it useful for a variety of tasks ranging from simple recovery of personal files to collection of evidence in digital forensic processes.
Download count: 1561
How to get this paper:
PDF copy of this paper is free to download. You may distribute this copy providing you cite this page as the source.