← Back to the atlas
No. 1195Problem statementSecurity and governance

Recovery of Deleted Data and Associated Metadata from XFS and Btrfs Filesystems

Source

  • Smart India Hackathon 2024 (opens in a new tab)By National Critical Information Infrastructure Protection Center (NCIIPC)NC033 / SOFTWARE / National Critical Information Infrastructure Protection Center (NCIIPC)Finale began: 11 Dec 2024

Source summary

Develop forensic recovery of deleted files and associated timestamps/metadata specifically for XFS and Btrfs. Handle the filesystems' journaling, copy-on-write and allocation structures and a broad range of documents, logs, configuration files and archives. Recovered context is needed for timelines as well as content. Provide a GUI or command-line interface with reports, and validate recovered data to preserve integrity.