File Carving

Definition - What does File Carving mean?

File carving refers to the reconstruction of computer files that takes place without helpful metadata indicators or other specific guidance. In the absence of this directive information, software systems have to use sophisticated heuristics and probability handling tools in order to successfully reassemble files.

Techopedia explains File Carving

One definition of file carving that is presented by some experts is the idea that software systems have to accurately collect pieces of file information from a larger "homogenous" data set on a disk drive or other storage area. File carving software can use markers like headers and footers to try to identify parts of a file. Beyond this, specialized algorithms can also help to improve file recovery outcomes.

Part of the success of file carving relies on the idea that files that are deleted from a computer or device are not really completely lost until their memory locations are deleted during a device wipeor other fundamental sweeping away of residual data. In many cases, file carving can be part of data forensics, where law-enforcement professionals or other specialized experts can reconstruct files, even after something like a disk formatting, or when the user has effectively deleted the files from a drive. Since many of the fragments of the file may still rest in unallocated memory, they can theoretically be reconstructed.

It’s important to note that other file recovery practices rely on more available system information. By contrast, file carving is largely done based on guesswork, which is why these software systems need advanced features that can more effectively bring order out of chaos.

Posted by:

Connect with us

Techopedia on Linkedin
Techopedia on Linkedin
Techopedia on Twitter

Sign up for Techopedia's Free Newsletter!
Techwise Webinar Series
Understanding the Big Data Landscape
Understanding the Big Data Landscape
Big Data is everywhere, that's for sure. But the big question for today's savvy enterprise is: exactly where does Big Data fit into your organization?

Email Newsletter

Join 138,000+ IT pros on our weekly newsletter

Free 30 Day Trial: SolarWinds® Log & Event Manager
Free 30 Day Trial: SolarWinds® Log & Event Manager:
Use this powerful SIEM to tackle compliance audits, perform root cause analysis and manage all logs in one place.
Free Whitepaper – Bridging the IT Operations Application Owner Gap
Free Whitepaper – Bridging the IT Operations Application Owner Gap:
Conflicting organizational needs all too often create tension between functional silos. Application owners demand more and more resources.
Free 30 Day Trial – VMTurbo Operations Manager
Free 30 Day Trial – VMTurbo Operations Manager:
VMTurbo's flagship product, Operations Manager maintains your virtual and cloud environments in a healthy state. It manages homogeneous and...