_Posted on May 09, 2024_ [FDRecovery](https://github.com/jdafoe12/FDRecovery) is the result of my first summer of research in the [MTU Security and Privacy Lab](https://snp.cs.mtu.edu/), led by [Bo Chen](https://pages.mtu.edu/~bchen/). This was the summer after my first year of undergraduate study. I was tasked with writing some application to recover files deleted by traditional filesystem level file deletion mechanisms. After completing the project, I concluded the summer by writing a series of technical reports which detail the high level implementation of [FDRecovery](https://snp.cs.mtu.edu/fdrecovery.html) for the different file systems, as well as a comparison to other file recovery tools all of which I link to here: - [[FDRecovery EXT3 and EXT4 Report|EXT3 and EXT4 Report]] - [[FDRecovery EXT2 Report|EXT2 Report]] - [[FDRecovery FAT32 and exFAT Report|FAT32 and exFAT Report]] - [[FDRecovery NTFS Report|NTFS Report]] - [Comparison with other tools](https://snp.cs.mtu.edu/tools/forensics-comparison.pdf) Additionally, this work resulted in the publication of a three-page preliminary poster paper on [[FFRecovery]], a fine grained ransomware recovery tool. We used FDRecovery to add filesystem forensics to [[Flash Translation Layer]], out-of-place updates based ransomware recovery mechanisms. This poster paper was published in the 2022 ACM Conference on Computer and Communications Security ([CCS '22](https://www.sigsac.org/ccs/CCS2022/)). I link to that paper here: [[ffrecovery_poster.pdf]].