SecurityBytes.org TechnologyBytes.org
© 2007 Monte L. Kendrick and Pixelogiq Data Systems, LLC
User login
Forensics
Remnant Data on FAT and NTFS Volumes (Part 1)
Sat, 10/06/2007 - 15:01 — mlkendrickWhen files are deleted from Windows machines, whether via the Recycle Bin or by immediate deletion, they are not actually purged from the system. That is because Windows merely marks the area occupied by the files as available for reuse, and in so doing, removes them from view. However, the data remain on the drive, and the files may be recovered through trivial means.
