A Novel Data Recovery Algorithm for FAT32 File System
Bairen Chen, Junlin Guan, Huadeng Wang, Gang Yao · 2021 2nd International Conference on Information Science and Education (ICISE-IE) · 2021
The data recovery technology of the FAT32 file system is widely used in computer forensics. Based on the traditional scanning algorithm, this paper draws on and improves the Sunday algorithm and the AC automata algorithm, combined with the characteristics of data decoding by the hexadecimal dump, and proposes a specific scanning strategy to classify and scan purposefully and recover and obtain evidence. Documents and information are displayed to realize a stable and fast scanning traversal program. For incomplete Office files, it can also analyze a series of streams of its compound documents, and finally obtain valuable relevant information to obtain evidence.