Can Recovery Vault be used in forensic research?

Occasionally we are getting requests from various law enforcement organizations throughout the world about Disk Drill and its forensic features. In addition to Forensic Data Export in DFXML format, turns out many are able to utilize other functions of Disk Drill for making our world a better place.

In this case we are talking about Recovery Vault and its contribution to professional use of our data recovery and protection technology. Recovery Vault can be compared to Apple’s Time Machine, but with a much smaller system footprint, less hardware requirements and minimal setup time. Recovery Vault greatly increases your data recovery chances by tracking the files that are getting deleted from protected hard drives. This also has a kind of opposite effect as well.

At the same time, this may also help investigators prove or find evidence that specific files were present on someone’s storage, if it was ever indexed by Disk Drill. It doesn’t necessarily mean Recovery Vault is a guaranteed proven method forensic specialists may rely on, however, if it was ever enabled by the user, there’s a chance its index files may help in recovering invaluable evidence. Recovery Vault may provide folder and file names, their size, last modification time and on-disk location for files in protected locations.

If you are interested in using Disk Drill for your forensic needs, and would like to get our help on deciphering Recovery Vault index files, we’d be glad to help. Reach out if you represent government, law enforcement divisions or an official contractor.