Data Recover and Forensics

Welcome to my website, which is dedicated to data recovery and forensics research! In today's digital age, recovering lost data and preserving precious memories have become more crucial than ever before. We store a vast amount of our personal and professional lives in digital format, including cherished photos, videos, and documents. Losing these valuable memories can be devastating.

I will examine known data recovery tools and write code to recover JPEGs from a corrupted flash memory card, a laptop drive with a corrupted Windows 8.1 OS that was reformatted with a Linux OS, and a Windows 7 laptop drive.


Flash Memory Recovery

The corrupted flash memory card examined was a XD-Picture Card that was not used in over a decade. The card was used with a digital camera capable of taking pictures and video.

Link to Detail Examination


Hard Drive Recovery

In this section, I detailed my account of a successful data recovery process for two old laptop drives. I delved into the technical aspects of NTFS, which is a widely used file system in modern hard drives, as well as the underlying mechanisms of hard drive operations.

Link to Section


Established Tools:

Data recovery is a critical process that often requires specialized tools, but many of them come with a price tag. In this section, I provide a brief overview of the tools that I tested. 


Link to Section

Python Code Used

The three Python scripts were developed for the purpose of extracting JPEG files from a given data file. It is important to note that while these scripts have the potential to extract JPEGs, they were primarily written for testing purposes rather than as a complete data extraction solution. Following the prescribed order of these scripts is crucial to successfully extracting JPEGs from the input file.

Use Navigation Bar on Top of Page for Code.