International Journal For Multidisciplinary Research

E-ISSN: 2582-2160     Impact Factor: 9.24

A Widely Indexed Open Access Peer Reviewed Multidisciplinary Bi-monthly Scholarly International Journal

Call for Paper Volume 7, Issue 2 (March-April 2025) Submit your research before last 3 days of April to publish your research paper in the issue of March-April.

Recovery of Deleted Files : Challenges and Techniques

Author(s) Mr. Naveen R, Mr. Vijayarajan A, Ms. Archana K P
Country India
Abstract In digital forensics, recovering deleted files is crucial for investigations related to cybercrimes, corporate espionage, financial fraud, and personal data recovery. When a file is deleted from a storage device, it is not immediately removed; instead, the system marks its space as available for new data. Until overwritten, this data can often be recovered using specialized forensic techniques. However, modern storage technologies, encryption, and anti-forensic tools pose significant challenges to successful data retrieval. This research explores the mechanisms of file deletion across various storage systems, including Hard Disk Drives (HDD s), Solid-State Drives (SSDs), USB flash drives, and cloud storage. It highlights challenges such as data overwriting, SSD TRIM operations, encrypted storage, and the deliberate use of data-wiping tools. The study also examines different file systems (NTFS, FAT, EXT, HFS+) and their impact on data recovery. To address these challenges, forensic experts employ recovery techniques such as metadata analysis, file carving, and data imaging. Advanced forensic tools, including Autopsy, FTK Imager, EnCase, and Test Disk, aid in identifying, extracting, and re-constructing deleted files. This study emphasizes the importance of digital forensics in modern investigations, showcasing how deleted file recovery can provide critical evidence in criminal cases, cybersecurity incidents, and civil disputes. The findings contribute to improving forensic methodologies, ensuring more effective and reliable data retrieval in forensic science.
Keywords Key words: Digital forensics, File recovery, Deleted data, Metadata analysis, Cyber security, File carving, Storage devices.
Field Computer > Network / Security
Published In Volume 7, Issue 2, March-April 2025
Published On 2025-04-17
DOI https://doi.org/10.36948/ijfmr.2025.v07i02.41088
Short DOI https://doi.org/g9f4tg

Share this