Thank you! Do you (or anyone) know how we might be able to determine a time/day when the files were deleted? I am unaware of anything in the registry that account for this?
Is there metadata on the file that was deleted itself that might provide insight? Like a modified date, accessed date, etc ...
Search found 2 matches
- Mon Nov 08, 2010 12:50 pm
- Forum: File Recovery
- Topic: Foresenic Question
- Replies: 3
- Views: 6365
- Fri Nov 05, 2010 7:21 pm
- Forum: File Recovery
- Topic: Foresenic Question
- Replies: 3
- Views: 6365
Foresenic Question
We have a situation that we are looking for advice on.
We have a drive that was "wiped clean" of all data before being returned to us. The good news is that we were able to use Rtools to recover a lot of this data.
The questions that we now have are:
1) Can we utilize any sort of imaging utility ...
We have a drive that was "wiped clean" of all data before being returned to us. The good news is that we were able to use Rtools to recover a lot of this data.
The questions that we now have are:
1) Can we utilize any sort of imaging utility ...