
International Journal For Multidisciplinary Research
E-ISSN: 2582-2160
•
Impact Factor: 9.24
A Widely Indexed Open Access Peer Reviewed Multidisciplinary Bi-monthly Scholarly International Journal
Home
Research Paper
Submit Research Paper
Publication Guidelines
Publication Charges
Upload Documents
Track Status / Pay Fees / Download Publication Certi.
Editors & Reviewers
View All
Join as a Reviewer
Get Membership Certificate
Current Issue
Publication Archive
Conference
Publishing Conf. with IJFMR
Upcoming Conference(s) ↓
WSMCDD-2025
GSMCDD-2025
Conferences Published ↓
RBS:RH-COVID-19 (2023)
ICMRS'23
PIPRDA-2023
Contact Us
Plagiarism is checked by the leading plagiarism checker
Call for Paper
Volume 7 Issue 2
March-April 2025
Indexing Partners



















Recovery of Deleted Files : Challenges and Techniques
Author(s) | Mr. Naveen R, Mr. Vijayarajan A, Ms. Archana K P |
---|---|
Country | India |
Abstract | In digital forensics, recovering deleted files is crucial for investigations related to cybercrimes, corporate espionage, financial fraud, and personal data recovery. When a file is deleted from a storage device, it is not immediately removed; instead, the system marks its space as available for new data. Until overwritten, this data can often be recovered using specialized forensic techniques. However, modern storage technologies, encryption, and anti-forensic tools pose significant challenges to successful data retrieval. This research explores the mechanisms of file deletion across various storage systems, including Hard Disk Drives (HDD s), Solid-State Drives (SSDs), USB flash drives, and cloud storage. It highlights challenges such as data overwriting, SSD TRIM operations, encrypted storage, and the deliberate use of data-wiping tools. The study also examines different file systems (NTFS, FAT, EXT, HFS+) and their impact on data recovery. To address these challenges, forensic experts employ recovery techniques such as metadata analysis, file carving, and data imaging. Advanced forensic tools, including Autopsy, FTK Imager, EnCase, and Test Disk, aid in identifying, extracting, and re-constructing deleted files. This study emphasizes the importance of digital forensics in modern investigations, showcasing how deleted file recovery can provide critical evidence in criminal cases, cybersecurity incidents, and civil disputes. The findings contribute to improving forensic methodologies, ensuring more effective and reliable data retrieval in forensic science. |
Keywords | Key words: Digital forensics, File recovery, Deleted data, Metadata analysis, Cyber security, File carving, Storage devices. |
Field | Computer > Network / Security |
Published In | Volume 7, Issue 2, March-April 2025 |
Published On | 2025-04-17 |
DOI | https://doi.org/10.36948/ijfmr.2025.v07i02.41088 |
Short DOI | https://doi.org/g9f4tg |
Share this

E-ISSN 2582-2160

CrossRef DOI is assigned to each research paper published in our journal.
IJFMR DOI prefix is
10.36948/ijfmr
Downloads
All research papers published on this website are licensed under Creative Commons Attribution-ShareAlike 4.0 International License, and all rights belong to their respective authors/researchers.
