The techniques that can be applied to this end strongly depend on the specifics of the file system in question. In forensic computing, especially in the field of postmortem file system forensics, the reconstruction of lost or deleted files plays a major role. This paper will be a guide for researchers searching for carving techniques in order to choose the appropriate carving algorithm and to continue improving it in the future. This paper is divided into two sections, the first section is the traditional carving approach and the second section is the advanced carving approach. These techniques are also classified according to the carving method styles used and the fragmentation issues as well as the type of a file system since these techniques rely on the content and the file structure of the particular file to be carved. The key contribution of this paper is the study and analysis of current existing file carving techniques for file carving in order to define their functionality. This paper focuses mainly on the different types of carving techniques commonly used based on particular circumstances. There are various styles of file carving techniques used for types of files, including PDF, JPEG, XML and etc. In general, carving is used to retrieve data with the absence of metadata that point to the content.

File carving is a technique used to retrieve data other than data recovery technique and data restoration technique.

File carving is a method that enables researchers to collect data from unallocated memory space.

Photorec apfs