RecuperaBit – Tool for Forensic File Reconstruction

Sometime you will need to recover and restore data from damaged file system to make your incident response investigation. RecuperaBit is a software which attempts to reconstruct file system structures and recover files. Currently it supports only NTFS.

The main argument is the path to a bitstream image of a disk or partition. this tool automatically determines the sectors from which partitions start.

RecuperaBit tool for forensic file system reconstruction.

RecuperaBit attempts reconstruction of the directory structure regardless of:

  • missing partition table
  • unknown partition boundaries
  • partially-overwritten metadata
  • quick format

The tool will allow to restore data that were deleted or provide you access to a damaged hard drive NTFS file system.

You can read more and download this tool over here:

Notify of
Inline Feedbacks
View all comments