ABSTRACT:

In this project we are creating a tool to create a drive of 1 GB and then load it and then can write data as memory blocks to that drive or read back and any time if user replace block then entire file will be corrupted and then user can calculate free and used memory. Any time user can delete the file and then deleted file can be recovered back.

File carving is the process of recovering files from an investigative target, potentially without knowledge of the filesystem structure. Current generation file carvers make complete copies of recovered files. Unfortunately, they often produce a large number of false positives – “junk” files with invalid formats that frequently consume large amounts of disk space. This paper describes an “in-place” approach to file carving, which allows the inspection of recovered files without copying file contents. The approach results in a significant reduction in storage requirements, shorter turnaround times, and opens new opportunities for on-the-spot screening of evidence. Moreover, it can be used to perform in-place carving on local and remote drives.

EXISTING SYSTEM:

Filesystem metadata is typically used – if at all – only to establish cluster sizes and to avoid carving undeleted files (which can be extracted without file carving). Unfortunately, the current practice of carving recovered data into new files carries a huge performance penalty that is inherent and cannot be solved by optimizing the carving application. The only justification for this approach is that virtually all the tools used to view or process the recovered data require a file-based interface to the data. A new strategy is needed that provides a filesystem interface to the output of the carver without actually creating carved files

3.2 PROPOSED SYSTEM:

In this project we are creating a tool to create a drive of 1 GB and then load it and then can write data as memory blocks to that drive or read back and any time if user replace block then entire file will be corrupted and then user can calculate free and used memory. Any time user can delete the file and then deleted file can be recovered back.

SYSTEM REQUIREMENTS
SOFTWARE REQUIREMENTS:
• Programming Language : Python
• Font End Technologies : TKInter/Web(HTML,CSS,JS)
• IDE : Jupyter/Spyder/VS Code
• Operating System : Windows 08/10

HARDWARE REQUIREMENTS:

 Processor : Core I3
 RAM Capacity : 2 GB
 Hard Disk : 250 GB
 Monitor : 15″ Color
 Mouse : 2 or 3 Button Mouse
 Key Board : Windows 08/10