File Carving

Why Trust Techopedia

What Does File Carving Mean?

File carving refers to the reconstruction of computer files that takes place without helpful metadata indicators or other specific guidance. In the absence of this directive information, software systems have to use sophisticated heuristics and probability handling tools in order to successfully reassemble files.

Advertisements

Techopedia Explains File Carving

One definition of file carving that is presented by some experts is the idea that software systems have to accurately collect pieces of file information from a larger “homogenous” data set on a disk drive or other storage area. File carving software can use markers like headers and footers to try to identify parts of a file. Beyond this, specialized algorithms can also help to improve file recovery outcomes.

Part of the success of file carving relies on the idea that files that are deleted from a computer or device are not really completely lost until their memory locations are deleted during a device wipe or other fundamental sweeping away of residual data. In many cases, file carving can be part of data forensics, where law-enforcement professionals or other specialized experts can reconstruct files, even after something like a disk formatting, or when the user has effectively deleted the files from a drive. Since many of the fragments of the file may still rest in unallocated memory, they can theoretically be reconstructed.

It’s important to note that other file recovery practices rely on more available system information. By contrast, file carving is largely done based on guesswork, which is why these software systems need advanced features that can more effectively bring order out of chaos.

Advertisements

Related Terms

Margaret Rouse
Senior Editor
Margaret Rouse
Senior Editor

Margaret is an award-winning technical writer and teacher known for her ability to explain complex technical subjects to a non-technical business audience. Over the past twenty years, her IT definitions have been published by Que in an encyclopedia of technology terms and cited in articles by the New York Times, Time Magazine, USA Today, ZDNet, PC Magazine, and Discovery Magazine. She joined Techopedia in 2011. Margaret's idea of a fun day is helping IT and business professionals learn to speak each other’s highly specialized languages.