MMMichael Miroshnichenkoinhetman-software.hashnode.dev·Sep 22 · 11 min readWhat Survives When a Hyper-V VM Is Lost? Testing RAID 5, BitLocker, VHDX, and CheckpointsA Hyper-V virtual machine is not just a VHDX file. Once checkpoints, storage encryption, RAID, and the guest filesystem are involved, recovery becomes a layered problem: RAID ↓ BitLocker ↓ Host RE00
MMMichael Miroshnichenkoinhetman-software.hashnode.dev·Sep 15 · 11 min readRecovering Deleted Windows EFS Files from NTFS: Why the Private Key MattersWindows EFS can look deceptively simple from the user’s point of view. You right-click a file or folder, enable encryption, and Windows continues to open it almost like any other file. The recovery si00
MMMichael Miroshnichenkoinhetman-software.hashnode.dev·Sep 12 · 10 min readRecovering BitLocker-Encrypted Storage Spaces: Parity and Simple Volumes on Windows Server 2022Windows Storage Spaces can make a server storage layout look deceptively simple: several physical drives are combined into a pool, a virtual disk is created on top, BitLocker encrypts the volume, and 00
MMMichael Miroshnichenkoinhetman-software.hashnode.dev·Sep 11 · 9 min readRecovering Deleted fscrypt Files from EXT4: A Practical Recovery WorkflowDeleting a file from an EXT4 filesystem is already a metadata problem: the directory entry and inode state change, while some of the file's blocks may remain until they are reused. With fscrypt, there00
MMMichael Miroshnichenkoinhetman-software.hashnode.dev·Sep 10 · 10 min readHow to Recover Deleted Files from E01, S01, and AFD Forensic Disk ImagesA forensic disk image is useful because it lets you investigate a storage device without repeatedly working with the original medium. But creating an image is only the first step. If files were delete00