- Home
- RAID Data Recovery Software
- Sherlock Forensics Recover
Sherlock Forensics Recover
Burnaby, British Columbia, Canada
What it is
Sherlock Forensics Recover is Windows software for examining drives, disk images, and RAID arrays during data recovery. It reconstructs RAID 0, 1, 5, 6, 10, and JBOD, as well as nested RAID 50 and 60, and checks layouts against file-system structures by measuring recovered file lengths. It reads NTFS, FAT, exFAT, ext, XFS, Btrfs, ZFS, APFS, and HFS+, and supports raw dd, E01, Ex01, VMware, and Hyper-V images. The software does not write to a source drive or allow recovered files to be saved back onto it. Recovered files carry a SHA-256 fingerprint and origin record. It can open BitLocker volumes using a passphrase or recovery key and LUKS volumes using a passphrase; it does not bypass encryption. The free plan supports browsing, previewing, and exporting files, plus creating raw or E01 images. Pro costs $295, paid once and adds deleted-file recovery, carving unallocated space, RAID reconstruction, lost-partition search, and previous Windows versions. Deleted data on most modern SSDs may be erased within seconds and then be unrecoverable by software.
For and against
For
- Supports multiple RAID levels, including nested RAID 50 and 60.
- Does not write to the source drive.
- Recovered files include SHA-256 fingerprints and origin records.
- Reads a broad range of file systems and disk images.
- Free plan can browse, preview, and export files.
Against
- Available for Windows 10 or 11 64-bit only.
- Pro costs $295, paid once.
- Deleted data on most modern SSDs may be erased quickly.
- Installation may fail on air-gapped benches without WebView2.
The verdict
Sherlock Forensics Recover provides RAID reconstruction and file-system-aware recovery tools, with source-drive protections and file records. The free edition is limited to browsing, previewing, exporting, and disk-image creation; Pro adds recovery functions.
Who it suits
It suits examiners, IT teams, and people dealing with a lost drive or broken array who use Windows 10 or 11 64-bit. The maker notes that air-gapped benches may lack the WebView2 runtime needed for installation.
Plans and prices
Sherlock Forensics Recover Free
Browse, preview and export files · Create raw or E01 disk images
Read 30 Sep 2026 · sherlockforensics.com
Sherlock Forensics Recover Pro
Deleted-file recovery · Carving unallocated space · RAID reconstruction · Lost-partition search
Read 30 Sep 2026 · sherlockforensics.com
On the record
- Air-gapped use
- The maker says installation requires WebView2 and may not work on an air-gapped forensic bench without that runtime.sherlockforensics.com · read 30 Sep 2026
- Download requirements
- The listed installer is version 0.1.370 for Windows 10 or 11 64-bit and is 3.1 MB; direct physical-drive reading requires elevation.sherlockforensics.com · read 30 Sep 2026
- Encryption support
- It opens BitLocker volumes with a passphrase or recovery key and LUKS volumes with a passphrase, and says it does not break or bypass encryption.sherlockforensics.com · read 30 Sep 2026
- File systems and images
- It reads NTFS, FAT, exFAT, ext, XFS, Btrfs, ZFS, APFS and HFS+, and supports raw dd, E01, Ex01, VMware and Hyper-V disk images.sherlockforensics.com · read 30 Sep 2026
- Forensic reporting
- Its examination report is a self-contained HTML file that can be opened offline and printed to PDF.sherlockforensics.com · read 30 Sep 2026
- Integrity records
- Each recovered file carries a SHA-256 fingerprint and a record of where it came from.sherlockforensics.com · read 30 Sep 2026
- Intended users
- The maker describes the free recovery software as intended for examiners, IT teams and people dealing with a lost drive or broken array.sherlockforensics.com · read 30 Sep 2026
- Purpose
- Sherlock Forensics Recover is data recovery software that measures recovered file lengths and verifies RAID layouts against file-system structures.sherlockforensics.com · read 30 Sep 2026
- RAID limits
- For nested arrays, RAID 50 tolerates one missing disk per group and RAID 60 tolerates two; it refuses a group with more missing disks than its parity can rebuild.sherlockforensics.com · read 30 Sep 2026
- RAID support
- It rebuilds RAID 0, 1, 5, 6, 10 and JBOD, plus nested RAID 50 and 60.sherlockforensics.com · read 30 Sep 2026
- Recovery caveat
- The maker says deleted data on most modern SSDs may be erased within seconds and cannot then be recovered by software.sherlockforensics.com · read 30 Sep 2026
- Source protection
- The software writes nothing to the source drive and prevents saving recovered files back onto that drive.sherlockforensics.com · read 30 Sep 2026
- Support
- The maker’s pages list the phone number 888.883.4550.sherlockforensics.com · read 30 Sep 2026
