A forensic approach for reassembling files in unallocated space is known as data carving or file carving. Data carving allows you to find and recover files and other objects by looking at the contents of a disc rather than the metadata and file structure.