Photo Forensics: Advanced File Carving Techniques

Files on disks and memory cards are broken into small blocks prior to storage. SmartCarving, described in this talk, looks at a deleted file as a giant jigsaw puzzle where each block of the file is a piece of the puzzle. Recovering a deleted file is like solving a jigsaw puzzle with tens of thousands of pieces. Recovering all the deleted files from a disk or memory card is equivalent to solving multiple jigsaw puzzles with hundreds of millions of pieces simultaneously!