Research Paper on Deleted Files and Partitions

Project Paper Outline 2

Wk4 Project Paper Outline

Jessica Carrington

October 4, 2020

ISSC458 Digital Forensics: Investigating Data and Image Files

Professor Michael Lewis

Recovery of Deleted Files and Partitions

Any individual, or any size of organization that utilizes a computer, must have a plan on how to recover files or partitions that have been deleted, either accidentally or on purpose. The recovery of files and partitions also plays a large role in any digital forensic investigation.

I. What are files and partitions

a. Definition of files

b. Definition of Partitions

II. Accidental Deletion

a. How files can be deleted accidentally

b. How partitions can be deleted accidentally

c. Corrupted hard disk and file loss

III. Purposful Deletion

a. How to delete files

i. How to prevent recovery of deleted files

b. How to delete partitions

i. How to prevent recovery of data from a deleted partition

IV. Recovery

a. Tools

b. Methods

c. Possible results

d. Different Operating System recovery options

V. Conclusion

a. Restate Topic Statement

b. Summerize paper

References

Active@ UNDELETE 15 Data Recovery Toolkit. (n.d.). Retrieved October 4, 2020, from https://www.active-undelete.com/undelete.html

Active@ UNERASER - Freeware Data Recovery Software. Undelete Files & Volumes. (n.d.). Retrieved October 4, 2020, from https://www.uneraser.com/undelete.html

Burghardt, A., & Feldman, A. J. (2008). Using the HFS+ journal for deleted file recovery. Digital Investigation, 5, S76–S82. https://doi.org/10.1016/j.diin.2008.05.013

Data Recovery Software and Undelete from R-TT. (n.d.). Retrieved October 4, 2020, from https://www.r-tt.com/

Jeon, S., heros86@korea. ac. kr, Bang, J., jwbang@korea. ac. kr, Byun, K., gdfriend@korea. ac. kr, & Lee, S., sangjin@korea. ac. kr. (2012). A recovery method of deleted record for SQLite database. Personal & Ubiquitous Computing, 16(6), 707–715. https://doi.org/10.1007/s00779-011-0428-7

Lee, S., & Shon, T. (2014). Improved deleted file recovery technique for Ext2/3 filesystem. Journal of Supercomputing, 70(1), 20–30. https://doi.org/10.1007/s11227-014-1282-y

Medlin, B. D., & Cazier, J. A. (2011). A Study of Hard Drive Forensics on Consumers’ PCs: Data Recovery and Exploitation. Journal of Management Policy and Practice; West Palm Beach, 12(1), 27–35.

Revankar, A. V., Gandedkar, N. H., & Ganeshkar, S. V. (2009). “Oops, I deleted it”—A solution for recovering deleted or reformatted digital images from memory cards. American Journal of Orthodontics and Dentofacial Orthopedics, 135(6), 820–822. https://doi.org/10.1016/j.ajodo.2008.09.027

The e2undel home page. (n.d.). Retrieved October 4, 2020, from http://e2undel.sourceforge.net/

Undelete Data Protection & File Recovery. (n.d.). Retrieved October 4, 2020, from http://www.condusiv.com/products/undelete/