This task can be performed using Digler
Digler: Unearth deleted data from disk images effortlessly.
Best product for this task
Digler
tech
Digler is an open-source forensic disk analysis utility that scans disk images and raw devices, generates detailed DFXML reports, and recovers deleted files with precision. It offers both CLI and desktop interfaces plus plugin-based extensibility for advanced digital forensics workflows.
What to expect from an ideal product
- Digler scans raw disk devices directly without needing to create image files first, saving time during urgent investigations
- The tool automatically generates comprehensive DFXML reports that document all file system metadata, timestamps, and deleted file remnants found on the disk
- Both command-line and desktop interfaces let investigators choose their preferred workflow for generating DFXML reports from physical drives
- Plugin architecture allows forensic teams to customize DFXML output formats and add specific reporting requirements for different case types
- Open-source design means investigators can verify the tool's methods and ensure DFXML reports will be accepted as reliable evidence in court
