Enhancing Autopsy with G-Code File Recovery: Ingest Module Development

This study studies the effectiveness of file-level and data source-level ingest modules in recovering g-code files in digital forensic investigations. Four scenarios were designed to simulate various challenges in file recovery, including identifying and recovering files, handling deleted files, and accessing files within compressed folders. Our experimental results demonstrate that both ingest modules successfully recovered g-code files, with the data source-level ingest module showing more consistent performance in execution time. The study also shows that the importance of file naming conventions and the challenges posed by compressed files. The study emphasizes the importance of file naming conventions and the challenges posed by compressed files, providing valuable insights into effective strategies for file recovery in digital forensic investigations and contributing to the advancement of forensic techniques in digital environments.