Logs

The main function of the log is to keep a record of files recovered.  For the forensic option, it provides details of exactly how the data has been reconstructed which ensures that such evidence could be used in court.


For the demo, the log provides a very good indication of which files have been found, and will be recovered by the licenced version.




The log has many columns, and an entry for each file/video recovered


#                        The number of the file recovered


Filesize                Bytes in the file


Full file name        The full name and path for the file


Filename                Just the file name


ext                        Type of file, normally mp4, jpg etc


Verify                        If OK, the file has been verified as valid


Horz                        This is the horizontal resolution of the video


Vert                        This is the vertical resolution of the video


Frames                This is the frame rate


Frags                        This indicates the number of fragments the file is made up of.  On the forensic version, if the number is clicked on, a full report of each data run is displayed


Start sector                The first sector of the file

       

Create date                The date the file was created


Modify date                The date the file was modified


MD5 Hash                On the forensic version, the MD5 hash value is saved.



Export


The displayed log can always be exported to a .CSV file.  This can be useful for logging in a forensic case, or sometimes to send to CnW Recovery for analysis.


The forensic package will include the MD5 hash value and also the fragmentation information.  The fragments are stored as pairs of fields following the main data.  The first field is the sector number, and the second field is the run length, in sectors.