The main function of the log is to keep a record of files recovered.  For the forensic option, it provides details of exactly how the data has been reconstructed which ensures that such evidence could be used in court.

For the demo, the log provides a very good indication of which files have been found, and will be recovered by the licenced version.

The log has many columns, and an entry for each file/video recovered

#                        The number of the file recovered

Filesize                Bytes in the file

Full file name        The full name and path for the file

Filename                Just the file name

ext                        Type of file, normally mp4, jpg etc

Verify                        If OK, the file has been verified as valid

Horz                        This is the horizontal resolution of the video

Vert                        This is the vertical resolution of the video

Frames                This is the frame rate

Frags                        This indicates the number of fragments the file is made up of.  On the forensic version, if the number is clicked on, a full report of each data run is displayed

Start sector                The first sector of the file


Create date                The date the file was created

Modify date                The date the file was modified

MD5 Hash                On the forensic version, the MD5 hash value is saved.


The displayed log can always be exported to a .CSV file.  This can be useful for logging in a forensic case, or sometimes to send to CnW Recovery for analysis.

The forensic package will include the MD5 hash value and also the fragmentation information.  The fragments are stored as pairs of fields following the main data.  The first field is the sector number, and the second field is the run length, in sectors.