Webinar

June 25, 2025

Carving in DFIR: Data Recovery and Detection of Anti-Forensic Measures

Register

Dr. Ashar Neyaz


Assistant Professor of Cybersecurity at Wentworth Institute of Technology

Elena Chertova


Belkasoft Knowledge Team's researcher, tech content writer, and BelkaGPT advocate

In digital forensics, file systems are just the tip of the iceberg. Beneath them lies a layer of low-level data where deleted, fragmented, or concealed evidence may still exist, waiting to be uncovered with the right techniques.

Join Belkasoft and Dr. Ashar Neyaz, Assistant Professor of Cybersecurity at the Wentworth Institute of Technology, for a webinar exploring the power of carving—an essential method for data recovery and detecting anti-forensic tactics.


We will revisit the fundamentals and discuss real-world challenges in data recovery and deobfuscation, including:

  • How different file systems handle data storage and deletion
  • Why deleted files can be recovered and where that data resides
  • What factors hinder file recovery
  • Why carving is rarely possible on modern mobile devices
  • Whether disk formatting and secure deletion utilities truly prevent recovery
  • How to identify disguised or renamed files through signature analysis
  • …And more insights from both research and classroom experience

Whether you are digging through evidence in a law enforcement lab or tackling cyber incidents in a corporate setting, deleted and hidden data recovery is often at the heart of the job. Join us for this webinar to refresh your knowledge, pick up practical tips, and stay in sync with evolving best practices in digital forensics.


The webinar will take place on June 25, 2025 at 3 PM GMT.

Reserve your spot now and take your forensic workflow to the next level.