Data Carving: Recovering Hidden Files from Digital Graveyards

  • Friday, 12 Jul 2024 1:00PM EDT (12 Jul 2024 17:00 UTC)
  • Speaker: Kathryn Hedley

Part 3 of 6

Don't believe the ‘delete’ button! This workshop equips you with the power of data recovery. We'll delve into allocated and unallocated clusters and file slack, the hidden compartments where deleted data can reside. Through hands-on exercises, you'll learn to identify different scenarios when it comes to deleted data, and recover or carve out files thought to be lost forever.

Background Information
This hands-on series cracks the code on digital evidence. Designed for beginners, you'll unlock the secrets hidden within devices, from understanding data storage to interpreting timestamps. Learn to extract critical evidence, navigate forensic images, and convert between data formats. Whether you're in law enforcement, IT security, or simply curious about the digital world, this series empowers you to become a digital detective.

 Register for all parts in the series:

Part 1: Demystifying Data: Hands-on Data Conversion Between Binary, Hexadecimal, Decimal, and ASCII

Part 2: Beyond File Names: Decoding the Secrets of Files with Signatures & Metadata

Part 4: Decoding Time: Understanding Endianness and Timestamp Formats

Part 5: Hands-on Digital Forensics: Exploring Evidence with Mounted Images

Part 6: Demystifying Base64: A Detailed Beginner's Guide to Encoding and Decoding