~/projects/recover
All projectsshippedDigital Forensics2024
Forensic Recovery Tool
File-recovery / digital-forensics utility for retrieving data from storage media.
problem
The problem
Deleted rarely means gone, it means dereferenced. Recovery tooling has to carve structure back out of raw bytes, which is equal parts filesystem knowledge and careful parsing.
approach
How I approached it
- Built a recovery utility that carves recoverable data from storage media.
- Applied digital-forensics techniques for structured retrieval.
architecture
Architecture
1Image
Read raw media safely
2Carve
Scan for file signatures / structures
3Recover
Reconstruct and export recoverable files
decisions
Engineering decisions & tradeoffs
$
Signature carving
// Works even when filesystem metadata is gone, the last-resort recovery path.
stack
PythonFilesystemsBinary parsing
what's next
- › Support more filesystems (ext4, APFS)
- › Recovery-integrity verification