This task can be performed using Digler
Digler: Unearth deleted data from disk images effortlessly.
Best product for this task
Digler
tech
Digler is an open-source forensic disk analysis utility that scans disk images and raw devices, generates detailed DFXML reports, and recovers deleted files with precision. It offers both CLI and desktop interfaces plus plugin-based extensibility for advanced digital forensics workflows.
What to expect from an ideal product
- Scans disk images and raw storage devices to locate traces of deleted files that still exist in unallocated space
- Creates comprehensive DFXML reports that document all discovered file artifacts and metadata for thorough analysis
- Recovers deleted files with high accuracy by reconstructing file headers and data fragments from disk remnants
- Provides both command-line tools for automated processing and desktop interface for manual file recovery workflows
- Supports plugin extensions that enhance recovery capabilities for specific file types and complex forensic scenarios
