Recovery of Deleted Data and Associated Metadata from XFS and Btrfs Filesystems
Source
- Smart India Hackathon 2024 (opens in a new tab)NC033 / SOFTWARE / National Critical Information Infrastructure Protection Center (NCIIPC)Finale began: 11 Dec 2024
Source summary
Develop forensic recovery of deleted files and associated timestamps/metadata specifically for XFS and Btrfs. Handle the filesystems' journaling, copy-on-write and allocation structures and a broad range of documents, logs, configuration files and archives. Recovered context is needed for timelines as well as content. Provide a GUI or command-line interface with reports, and validate recovered data to preserve integrity.