Recovering lost data has always been a crucial part of Computer Forensics. One reason for this is because files aren't truly 'deleted' until they are overwritten by another file, meaning most files can still be found days to weeks after being deleted. This lab will demonstrate how files are 'deleted' then prepared to be overwritten.

Continuing Professional Education (CPE) Credit Count: 2