| <<< Orphan Files | Index | Carving Example >>> |
Files associated with pictures, documents, executable files, etc. can be deleted by the user.
Carving recovers deleted files without relying on the file system knowledge.
Carving relies solely on the file structure internals. For example,
JPEG, PDF, Word documents, EXE files can be carved.
Carving is needed when the File System no longer has pointers to the file content.
| <<< Orphan Files | Index | Carving Example >>> |