Just wondered if anyone has done any research (or knows of any) into the survival time of deleted data (before being overwritten) on FAT and NTFS devices under different formatting conditions and clustr sizes etc?
I was thinking about doing some work in this area but:-
a) wasnt sure if it was worth it? is there any forensic value in it
b) wasnt sure how to test it - should it provide context to say browser cache turnover of cached content before it is overwritten?
What do people think?
↧