Assuming this is a practical question and not a rhetorical one, you need to include more detail and clarification about the "recuperated" data and how it was derived. By a "salad of mixed up files", do you mean the files are all still separately present as files, but have simply lost their original folder identities? Or do you mean that somehow the data within all the different files has been run together in some giant mega-file? Is this an NTFS forensic exercise involving the MFT, metafiles, and file streams?
