Comparison between file carving from disk drive and disk image in open source environment

Author

Aljumah, Abdullah ; Uddin, Mohammad Yousuf ; Ahamad, Mohammad Gulam

Author_Institution

Coll. of Comput. Eng., Salaman bin Abdulaziz Univ., Al Kharj, Saudi Arabia

fYear

2014

Firstpage

1

Lastpage

4

Abstract

The file carving is one of the methods in data recovery from corrupted or damaged hard disk drives(HDD). Numerous open source commercial tools with different features are available in the market. In the present work an attempt was made for file carving with two different methods: 1) File carving from hard disk drive directly and 2) File carving from disk image. In this investigation the file carving tool PhotoRec and disk imaging tools such as Gddrescue, safecopy were used. Quiet a significant improvement in data recovery was found in case of file carving from disk image method. All most 1GB more data was resulted in file carving through disk image when compared with that of targeted HDD directly.

Keywords

hard discs; public domain software; system recovery; Gddrescue; HDD; PhotoRec; damaged hard disk drives; data recovery; disk image; disk imaging tools; file carving; open source environment; safecopy; Disk drives; Drives; Forensics; Hard disks; Imaging; Linux; Operating systems;

fLanguage

English

Publisher

ieee

Conference_Titel

Computer and Communications Technologies (ICCCT), 2014 International Conference on

Type

conf

DOI

10.1109/ICCCT2.2014.7066755

Filename

7066755