1. A method for recovering deleted files in a data store, comprising: identifying candidate blocks of a data store; determining for each of the candidate blocks a probability that the candidate block contains a directory entry; and extracting directory entry metadata for candidate blocks that have a determined probability that is greater than a predetermined probability threshold.