data restoration and file carving .
Forensic carving of network packets and associated data structures