Analisis Pemulihan File Terhapus Permanen Menggunakan Disk Drill pada Media Penyimpanan USB

Abstract

Data loss due to human error or malware attacks is a serious obstacle in the use of digital storage media. The main problem is the assumption that permanent deletion completely erases the data, even though the data is still physically retained on the storage media because the operating system only deletes the metadata pointer. This study applies a digital forensic approach through the Deep Scan feature in Disk Drill software, which integrates metadata scan and file carving techniques. The dataset used in this test is a 32 GB USB Flashdisk containing eight different file format variants (such as DOCX, PDF, and JPG) that have been permanently deleted. The test results show a 100% recovery success rate, where all test files were successfully found and restored in an intact condition (integrity maintained). This study contributes by empirical validation of the reliability of the file carving technique in recognizing file signatures, so that it can be a practical reference in digital forensic investigation procedures and self-service data recovery.