HomeCybersecurityDigital Forensics Lab: File Carving, Deleted Data & Chain of Custody

🧩 Digital Forensics Lab: File Carving, Deleted Data & Chain of Custody

Interactive digital forensics simulator: delete files from a simulated disk, watch how their blocks stay recoverable until overwritten, run a signature-based file-carving scan, and verify recovered data against its original hash.

Cybersecurity2DModerate60 FPS
digital-forensics-forensics ↗ Open standalone
⚙ Under the hood

Delete files from a simulated disk block map and watch the filesystem mark their space free while the bytes stay physically intact. Write new data to risk overwriting them, then run a signature-based file-carving scan (JPEG FF D8 FF, PDF, ZIP, EXE headers) to recover what survives, and compare before/after hashes to verify data integrity.

digital forensicsfile carvingchain of custodydata recoverycybersecuritycanvas 2D

2D · HTML5 Canvas 2D · 60 FPS target · runs fully client-side, no install

What did you find?

Add reproduction steps (optional)