Computer Security, Forensics and Ethical Hacking
Discussion Forum: File System
the purpose of a file system in an operation system and why it is possible to recover a deleted file.
The most important purpose of a file system is to manage user data. This includes storing, retrieving and updating data. ... The user program can read, write and update records without regard to their location. This requires complicated management of blocks of media usually separating key blocks and data blocks.
why it is possible to recover a deleted file?
- You should recover the file as soon as possible: As Windows continues to write files to your hard drive, the chances of it overwriting the deleted files increases. If you want to be sure you can recover the file, you should perform a recovery immediately.
- You should try to use the hard drive as little as possible: The best way to recover a deleted file from a hard drive is powering the computer down immediately after the file is deleted, inserting the hard drive into another computer, and using an operating system running on another hard drive to recover it. If you try to recover a file by installing a file-recovery program on the same hard drive, the installation process and normal use of the hard drive can overwrite the file.