1. A method for recovering deleted files in a data store comprising a FAT file system, comprising: identifying candidate blocks of a data store, each candidate block comprising a plurality of portions; determining for each of the candidate blocks a first probability that the candidate block contains a directory entry based upon one of the plurality of portions; determining for each of the candidate blocks a second probability that the candidate block contains a directory entry based upon another one of the plurality of portions; combining the first probability and second probability to form a combined probability; wherein the first and second probabilities are based on the portion being part of a valid directory entry; extracting directory entry metadata for candidate blocks that have a combined probability that is greater than a predetermined probability threshold; and recovering the content of a deleted file using the extracted directory entry metadata.