In our next activity, we will learn how to attach volumes to our Kali machine and then use forensics to recover the deleted data. Before we dive into a hands-on exercise, let's understand what forensics is and how data recovery works.
Forensic Data Analysis (FDA) comes under the umbrella of Digital Forensics, and is the method of recovering and analysing data to gain an insight into how the data was created, and to acquire digital dust in the cases of cyber crime and fraud. Data recovery can be performed on a range of devices including mobile devices, storage devices, and servers. The techniques involved include data decryption, and reverse engineering binaries analysis of logs.
When it comes to data recovery, we face two types of data; namely, persistent data (which is written to a drive and is easily accessible) and volatile data...
