Software and methods of recovery of information in the process of computer forensics

Abstract

Search for information objects in the investigated media is the main step in conducting
forensic examinations. Found objects are subsequently become the basis for the evidence of
the incident. In the article the use of data recovery techniques. We analyzed the available solutions on the market that provide the ability to recover deleted and hidden information. We
describe the software that is used in computer forensics. We also conducted comparative
tests of commercial and free products. Evaluate the merits and disadvantages of each tool.