Open-Source Forensics Tools for Recovery of Deleted Data in Unconventional Ways

Tuqa Al-Makkawi, Ayoub Alsarhan, Qais Al-Na’amneh, Mohammad Aljaidi, Mohammed Amin Almaiah, Mahmoud AlJamal, Rabee Alquran, Mahmoud Aljawarneh

2025Advances in information security, privacy, and ethics book series8 citationsDOI

Abstract

Nowadays, technology is propagation rapidly that it is virtually completely replacing the real world with a “virtual world.” Electronic forensics important as medical forensics to investigate electronic crime” which increases with time”, to prevent unwanted file recovery, many computer users choose to overwrite files instead of deleting them to collect evidence and analysis by several methods and tools to present in front of the law. This paper studies the collection and analysis of files with an emphasis on deleted files from different resources and evaluates the performance of open-source programs for recovering deleted data using unconventional ways. It discusses some forensics tools, including FTK, and Encase, and the ability to extract the deleted file, showing a general comparison between forensics tools.

Topics & Concepts

Open sourceComputer scienceData scienceComputer forensicsComputer securityDigital forensicsOperating systemSoftwareDigital and Cyber ForensicsDigital Media Forensic DetectionAdvanced Malware Detection Techniques