Quantcast
Channel: Forensic Focus Forums - Recent Topics
Viewing all articles
Browse latest Browse all 20119

General Discussion: deleted data survival times

$
0
0
Thanks both for your replies. I kind of feel the same in the sense that you are both drawing reference to 'practical use'. But then in terms of triage (maybe im trying too hard to find a use), could we infer something for example from event logs showing active times which may then provide a % of chance of recovery and therefore whether it is worth implementing a long carving process? I wonder if there is some way to determine when a carve would be useful to make things more efficient.

Viewing all articles
Browse latest Browse all 20119

Trending Articles