Skip to content
SPECIFICTION
Get listed

Sherlock Forensics Recover

sherlockforensics.com

Free plan Windows
Visit sherlockforensics.com
Spec score 7.6 #14 of 27 in RAID Data Recovery Software

What it is

Sherlock Forensics Recover is Windows data recovery software for examining drives, disk images and RAID arrays. It measures recovered file lengths to check RAID layouts against file-system structures, and can rebuild RAID 0, 1, 5, 6, 10 and JBOD, as well as nested RAID 50 and 60. For nested arrays, RAID 50 can handle one missing disk per group and RAID 60 can handle two; the software refuses groups with more missing disks than parity can rebuild. It reads NTFS, FAT, exFAT, ext, XFS, Btrfs, ZFS, APFS and HFS+, and supports raw dd, E01, Ex01, VMware and Hyper-V images. It does not write to the source drive or let recovered files be saved back to it. Each recovered file has a SHA-256 fingerprint and origin record. It opens BitLocker volumes with a passphrase or recovery key and LUKS volumes with a passphrase, but does not bypass encryption. The free plan costs nothing; Pro costs $295, paid once.

Spec sheet

Purpose
Sherlock Forensics Recover is data recovery software that measures recovered file lengths and verifies RAID layouts against file-system structures.Read 30 Sep 2026 · sherlockforensics.com
Intended users
The maker describes the free recovery software as intended for examiners, IT teams and people dealing with a lost drive or broken array.Read 30 Sep 2026 · sherlockforensics.com
Support
The maker’s pages list the phone number 888.883.4550.Read 30 Sep 2026 · sherlockforensics.com
Headquarters
Burnaby, British Columbia, CanadaRead 28 Sep 2026 · sherlockforensics.com
Founded
2006Read 28 Sep 2026 · sherlockforensics.com
Air-gapped use
The maker says installation requires WebView2 and may not work on an air-gapped forensic bench without that runtime.Read 30 Sep 2026 · sherlockforensics.com
Download requirements
The listed installer is version 0.1.370 for Windows 10 or 11 64-bit and is 3.1 MB; direct physical-drive reading requires elevation.Read 30 Sep 2026 · sherlockforensics.com
Encryption support
It opens BitLocker volumes with a passphrase or recovery key and LUKS volumes with a passphrase, and says it does not break or bypass encryption.Read 30 Sep 2026 · sherlockforensics.com
File systems and images
It reads NTFS, FAT, exFAT, ext, XFS, Btrfs, ZFS, APFS and HFS+, and supports raw dd, E01, Ex01, VMware and Hyper-V disk images.Read 30 Sep 2026 · sherlockforensics.com
Forensic reporting
Its examination report is a self-contained HTML file that can be opened offline and printed to PDF.Read 30 Sep 2026 · sherlockforensics.com
Integrity records
Each recovered file carries a SHA-256 fingerprint and a record of where it came from.Read 30 Sep 2026 · sherlockforensics.com
RAID limits
For nested arrays, RAID 50 tolerates one missing disk per group and RAID 60 tolerates two; it refuses a group with more missing disks than its parity can rebuild.Read 30 Sep 2026 · sherlockforensics.com
RAID support
It rebuilds RAID 0, 1, 5, 6, 10 and JBOD, plus nested RAID 50 and 60.Read 30 Sep 2026 · sherlockforensics.com
Recovery caveat
The maker says deleted data on most modern SSDs may be erased within seconds and cannot then be recovered by software.Read 30 Sep 2026 · sherlockforensics.com
Source protection
The software writes nothing to the source drive and prevents saving recovered files back onto that drive.Read 30 Sep 2026 · sherlockforensics.com

Plans and prices

Sherlock Forensics Recover Free Free Browse, preview and export files · Create raw or E01 disk images Read 30 Sep 2026 · sherlockforensics.com
Sherlock Forensics Recover Pro $295, paid once One-time payment. No subscription. Deleted-file recovery · Carving unallocated space · RAID reconstruction · Lost-partition search · Previous Windows versions Read 30 Sep 2026 · sherlockforensics.com

Every Sherlock Forensics Recover plan and price →

Strong points and limits

Strong points

  • Rebuilds RAID 0, 1, 5, 6, 10, JBOD, 50 and 60.
  • Reads nine listed file systems.
  • Supports raw, E01, Ex01, VMware and Hyper-V images.
  • Keeps source drives unchanged and blocks saving recovered files there.
  • Free plan supports browsing, previewing, exporting and imaging.

Limits

  • Windows 10 or 11 64-bit only.
  • Pro costs $295, paid once.
  • Deleted data on most modern SSDs may be erased within seconds.
  • Installation requires WebView2, which may be unavailable on air-gapped benches.

Who it suits

It suits examiners, IT teams and people dealing with a lost drive or broken array who need Windows recovery tools. The listed installer supports Windows 10 or 11 64-bit.

Verdict

The free plan covers browsing, previewing, exporting files and creating raw or E01 images; Pro adds deleted-file recovery, RAID reconstruction and other recovery functions. Check the SSD caveat and WebView2 requirement before choosing it for an examination.

Where Specifiction places it

Alternatives to Sherlock Forensics RecoverAll alternatives →