Useful Tips in Data Recovery

Lesson 4 – Recovering metadata in Copy-on-Write filesystems

This lesson covers the difference between storing file metadata in a CoW-capable filesystem and in a non-CoW filesystem. Additionally, the experiment devoted to know whether it is possible to reliably determine file timestamps on BTRFS is discussed in detail. Based on the experiment result, we provide a set of rules sticking to which you can get the most complete picture of file timestamps on a CoW filesystem.

Download printable summary of this video (PDF)

Download printable summary of the experiment (PDF)

Download two disk image files, compressed to a ZIP archive, 5 MB