What Survives When a Hyper-V VM Is Lost? Testing RAID 5, BitLocker, VHDX, and CheckpointsA lab look at what remains recoverable across RAID, BitLocker, VHDX, AVHDX checkpoint chains, and the guest filesystem after Hyper-V storage loss.11 min read·hetman-software.hashnode.devSep 22
Recovering Deleted Windows EFS Files from NTFS: Why the Private Key MattersA practical look at how Windows Encrypting File System protects individual files, what survives after deletion, and why recovering the file itself is only half of the job.11 min read·hetman-software.hashnode.devSep 15
Recovering BitLocker-Encrypted Storage Spaces: Parity and Simple Volumes on Windows Server 2022A practical recovery workflow for damaged Windows Storage Spaces, BitLocker-encrypted virtual disks, and ReFS volumes — without rebuilding or writing to the original storage.10 min read·hetman-software.hashnode.devSep 12
Recovering Deleted fscrypt Files from EXT4: A Practical Recovery WorkflowWhat changes when deleted Linux files are encrypted at the filesystem level, and how to approach recovery safely.9 min read·hetman-software.hashnode.devSep 11
How to Recover Deleted Files from E01, S01, and AFD Forensic Disk ImagesA practical workflow for mounting forensic images, choosing the right scan mode, and recovering data without modifying the original evidence.10 min read·hetman-software.hashnode.devSep 10