The main function of the log is to keep a record of files recovered. For the forensic option, it provides details of exactly how the data has been reconstructed which ensures that such evidence could be used in court.
For the demo, the log provides a very good indication of which files have been found, and will be recovered by the licenced version.
The log has many columns, and an entry for each file/video recovered
# The number of the file recovered
Filesize Bytes in the file
Full file name The full name and path for the file
Filename Just the file name
ext Type of file, normally mp4, jpg etc
Verify If OK, the file has been verified as valid
Horz This is the horizontal resolution of the video
Vert This is the vertical resolution of the video
Frames This is the frame rate
Frags This indicates the number of fragments the file is made up of. On the forensic version, if the number is clicked on, a full report of each data run is displayed
Start sector The first sector of the file
Create date The date the file was created
Modify date The date the file was modified
MD5 Hash On the forensic version, the MD5 hash value is saved.
The displayed log can always be exported to a .CSV file. This can be useful for logging in a forensic case, or sometimes to send to CnW Recovery for analysis.
The forensic package will include the MD5 hash value and also the fragmentation information. The fragments are stored as pairs of fields following the main data. The first field is the sector number, and the second field is the run length, in sectors.