Systems and methods for locating application specific data

Systèmes et procédés pour localiser des données spécifiques d'application

Systeme und Verfahren zur Lokalisierung anwendungsspezifischer Daten


A system and a method for locating application-specific data that has been previously deleted and located in an address of the data storage device marked as being available for storing new data. The method includes accessing unidentified data from at least one data storage device; examining the unidentified data to detect at least one application-specific data pattern associated with at least one application; for each detected application-specific data pattern, executing an application-specific validation process to determine whether the unidentified data includes valid data associated with a corresponding application; and if it is determined that the unidentified data includes valid data associated with the corresponding application, then recovering the valid data.




Download Full PDF Version (Non-Commercial Use)

Patent Citations (1)

    Publication numberPublication dateAssigneeTitle
    US-2007118607-A1May 24, 2007Niko NelissenMethod and System for forensic investigation of internet resources

NO-Patent Citations (2)

    DIGITAL DETECTIVE GROUP: "NetAnalysis User Manual v1.53", 4 November 2011 (2011-11-04), pages 1 - 156, XP055090745, Retrieved from the Internet [retrieved on 20131128]
    GARFINKEL ET AL: "Carving contiguous and fragmented files with fast object validation", DIGITAL INVESTIGATION, ELSEVIER, AMSTERDAM, NL, vol. 4, 24 July 2007 (2007-07-24), pages 1 - 12, XP022166442, ISSN: 1742-2876, DOI: 10.1016/J.DIIN.2007.06.017

Cited By (0)

    Publication numberPublication dateAssigneeTitle