using file carving techniques is one of most recent techniques that is used to retrieve the important data from unallocated space in a corrupted file system. In the traditional operating systems, such as Windows or Linux that have a small size of hard disk to store data, the researchers implemented many file carving techniques to carve a specific type of files (e.g. PDF, JPIG... etc.). However, with the presence of a specially designed file system that stores a huge volume of data, namely Hadoop Distributed File System (HDFS), the carving techniques should be established to recover the minimum amount of data corrupted by attackers considering the HDFS capabilities. In this research, we propose a framework, which encompasses different steps working together as a new carving technique to retrieve the most possible pieces of files that are corrupted by 10%, and to ensure that the files are successfully carved.