SOFTWARE TOOL FOR NTFS FILE SYSTEM FILE RECOVERY

Authors

  • Nikola Milosavljević Autor

DOI:

https://doi.org/10.24867/28BE08Milosavljevic

Keywords:

data recovery, digital forensics, file systems, NTFS

Abstract

Data loss can have serious consequences in modern environments, both for organizations and individuals. For this reason, data recovery is a crucial aspect of data management. This field requires continuous updates to data recovery techniques and tools that implement these techniques, considering the rapid development of hardware and software. This paper analyzes various data recovery techniques, with focus on the NTFS file system. The emphasis is placed on implementation of a data recovery tool based on the analysis of file system metadata. The paper demonstrates how to use the implemented tool and analyzes its advantages and disadvantages compared to other similar solutions.

References

[1] B. Carrier, File System Forensic Analysis: What is a File System?, Massachusetts: Addison-Wesley Professional, 2005.
[2] B. Carrier, File System Forensic Analysis: File name category”, Massachusetts: Addison-Wesley Professional, 2005.
[3] B. Carrier, File System Forensic Analysis: NTFS Concepts”, Massachusetts: Addison-Wesley Professional, 2005.
[4] “File Allocation Table” – FAT16 F, FATX F. [Online]. Available: http://cs.williams.edu/~jannen/teaching/s19/cs333/readings/FAT/File_Allocation_Table-Wikipedia.pdf. [Accessed: Sep. 16, 2023]
[5] “NTFS Master File Table (MFT)” [Online]. Available: https://www.ntfs.com/ntfs-mft.htm. [Accessed: Sep. 27, 2023]
[6] “Linux kernel version history” Jan. 11, 2020. Available: https://en.wikipedia.org/wiki/Linux_kernel_version_history#Releases_5.x.y. [Accessed: Sep. 23, 2023]

Downloads

Published

2024-09-03

Issue

Vol. 39 No. 09 (2024): Proceedings of Faculty of Technical Sciences

Section

Electrotechnical and Computer Engineering