Searching for Deleted Files with OSForensics

OSForensics lets you extract forensic evidence from computers quickly with high performance file searches and indexing. Identify suspicious files and activity with hash matching, drive signature comparisons, e-mails, memory and binary data. Manage your digital investigation and create reports from collected forensic data.

In this video we take a look at the Deleted Files Search Module, which can be used to recover files deleted from the file system (i.e. deleted file no longer in recycling bin). This is especially useful for recovering files that the user may have attempted to destroy.

[momogunsabah]

hello sir, how about recovering file which deleted from android phone? I was accidentally deleted my video that I was recording yesterday. thanks

[Kunio]

Hi, while attempting to recover files from a damaged HDD with a usb adapter the software Acronis disk director hanged when attempting to list available disks, then windows BSODed with "Critical process died", somehow this made two SSDs 'uninitialized'. One of them was the OS disk, I restored this back with Acronis partition recovery. But I have a problem with the other SSD, 1TB with 3 partitions, the software's that I tried can only seem to be able to recover let's say less than 30-40% of data(and somehow this is mostly older data that mostly I have a backup). Any suggestions, any tricks to resolve this?