Recovery Method of Video Data in NTFS File System
Xiaonan Zhang · Jisuanji gongcheng · 2010
In the NTFS file system,video monitor file is divided into a large number of very small block for storage,the entire file is formed by the index tables,the main index table is missing when the file is deleted,but other index tables exist in the extended attributes. This paper proposes a method for recovering data by the extended property according to file. This method can effectively combine many scattered fragments together and recover most of video monitor data which has already been deleted.