Webinar
June 25, 2025
Carving in DFIR: Data Recovery and Detection of Anti-Forensic Measures
Register
Dr. Ashar Neyaz
Assistant Professor of Cybersecurity at Wentworth Institute of Technology
Elena Chertova
Belkasoft Knowledge Team's researcher, tech content writer, and BelkaGPT advocate
In digital forensics, file systems are just the tip of the iceberg. Beneath them lies a layer of low-level data where deleted, fragmented, or concealed evidence may still exist, waiting to be uncovered with the right techniques.
Join Belkasoft and Dr. Ashar Neyaz, Assistant Professor of Cybersecurity at the Wentworth Institute of Technology, for a webinar exploring the power of carving—an essential method for data recovery and detecting anti-forensic tactics.
We will revisit the fundamentals and discuss real-world challenges in data recovery and deobfuscation, including:
- How different file systems handle data storage and deletion
- Why deleted files can be recovered and where that data resides
- What factors hinder file recovery
- Why carving is rarely possible on modern mobile devices
- Whether disk formatting and secure deletion utilities truly prevent recovery
- How to identify disguised or renamed files through signature analysis
- …And more insights from both research and classroom experience
Whether you are digging through evidence in a law enforcement lab or tackling cyber incidents in a corporate setting, deleted and hidden data recovery is often at the heart of the job. Join us for this webinar to refresh your knowledge, pick up practical tips, and stay in sync with evolving best practices in digital forensics.
The webinar will take place on June 25, 2025 at 3 PM GMT.