ALERT

[WEBINAR] Application Running Slowly? Time to Get Precise

File Carving

Definition - What does File Carving mean?

File carving refers to the reconstruction of computer files that takes place without helpful metadata indicators or other specific guidance. In the absence of this directive information, software systems have to use sophisticated heuristics and probability handling tools in order to successfully reassemble files.

Techopedia explains File Carving

One definition of file carving that is presented by some experts is the idea that software systems have to accurately collect pieces of file information from a larger "homogenous" data set on a disk drive or other storage area. File carving software can use markers like headers and footers to try to identify parts of a file. Beyond this, specialized algorithms can also help to improve file recovery outcomes.

Part of the success of file carving relies on the idea that files that are deleted from a computer or device are not really completely lost until their memory locations are deleted during a device wipeor other fundamental sweeping away of residual data. In many cases, file carving can be part of data forensics, where law-enforcement professionals or other specialized experts can reconstruct files, even after something like a disk formatting, or when the user has effectively deleted the files from a drive. Since many of the fragments of the file may still rest in unallocated memory, they can theoretically be reconstructed.

It’s important to note that other file recovery practices rely on more available system information. By contrast, file carving is largely done based on guesswork, which is why these software systems need advanced features that can more effectively bring order out of chaos.

Connect with us

Techopedia on Linkedin
Techopedia on Linkedin
Tweat cdn.techopedia.com
"Techopedia" on Twitter


'@Techopedia'
Sign up for Techopedia's Free Newsletter!

Email Newsletter

Join thousands of others with our weekly newsletter

Resources
JOIN US AT THWACKCAMP 2016
JOIN US AT THWACKCAMP 2016:
THWACKcamp is an annual IT knowledge share event hosted by THWACK, the SolarWinds community of 130,000+ members. It's a two day event (September 14 -...
Free Whitepaper: The Path to Hybrid Cloud
Free Whitepaper: The Path to Hybrid Cloud:
The Path to Hybrid Cloud: Intelligent Bursting To Amazon Web Services & Microsoft Azure
Free E-Book: Public Cloud Guide
Free E-Book: Public Cloud Guide:
This white paper is for leaders of Operations, Engineering, or Infrastructure teams who are creating or executing an IT roadmap.
Free Tool: Virtual Health Monitor
Free Tool: Virtual Health Monitor:
Virtual Health Monitor is a free virtualization monitoring and reporting tool for VMware, Hyper-V, RHEV, and XenServer environments.
Free 30 Day Trial – Turbonomics
Free 30 Day Trial – Turbonomics:
Turbonomic delivers an autonomic platform where virtual and cloud environments self-manage in real-time to assure application performance.