File Recovery Part 2
In this module, you will:
- Compare the outcome of different DFR mechanisms (i.e., metadata-based mechanism vs. file carving)
- Demonstrate the difference in outcomes of the recovery process for different file types
- Explain how DFR mechanisms work under the hood
Metadata and DFR Mechanisms
Download and read these slides to start learning about file metadata and the different DFR (Data File Recovery) mechanisms
File Recovery Part 2.pdfHere are the labs, which are the same or similar to the hands-on practice in the slides
Labs.zip
Additional Lessons
Look at some of the basic linux commands useful in navigating file systems
Linux Commands.pdf