File Carving
The recovery of files or fragments from raw storage by identifying content signatures and structural patterns without relying on normal filesystem metadata.
Boundaries
File carving recovers content from signatures and structure, not from trusted filesystem ownership metadata; recovered files may be fragmented or partially reconstructed.
Related Concepts
- Magic Number
- Unallocated Space
- Disk Image
- Data Recovery