Jul 10
22
Data recovery software is utilized to help salvage information from damaged, failed, or otherwise inaccessible storage media. Such recovery might be necessary on account of physical damage or, more likely, so-called logical damage to the file system such that the desired information can’t be read or read properly by the host operating system.
Typical data recovery scenarios consist of operating system failure, in which case the task is to merely backup all desired files onto another storage device; disk-level failure, which can be a lot more complex as any number of variables might be involved; and file deletion, where files have been erased but not yet permanently so. Most physical damage cannot be repaired by end-users and will therefore need a professional data recovery expert if there’s any chance of recovery at all.
Some of the most interesting aspects of data recovery involve crime and espionage. Computer forensics is the field dedicated to explaining the present state of a digital artifact. Thus also known as digital forensics, this discipline is concerned with determining the presence of data as well as the sequence of events responsible for the current state of data. It is a subject with several branches of particular concern, for instance firewall forensics, network forensics, database forensics, and mobile device forensics.
The use of data recovery software is frequently much more prosaic, nonetheless; many typical home users accidentally delete crucial files and then need to recover them. What makes recovery possible in these situations is that the file system only deletes the file structure information of a file, allocating the physical location for future overwriting.
But unless that overwrite occurs, the data is still in fact present on the storage medium, making possible the miracle of data recovery in many instances. In tougher situations where the data has actually been overwritten, an even more exotic and esoteric process called file carving is required.
