Quantcast
Channel: Forensic Focus Forums - Recent Topics
Viewing all articles
Browse latest Browse all 20107

General Discussion: wipng free space(shadow copy, system restore)

$
0
0
electronic_x wrote: jaclaz, I did not understand totally your answer. My quesion, in short, is: if you plug a pendrive or USB hard drive, or other device, into a PC(windows vista or 7), select a file -let´s say a WAV file- and listen it, and then unplug the external device , Does remain any kind of copy of that file in the PC, so it can be recovered later?That may depend from a number of factors, including the specific WAV player, the size of the WAV file, the amount of RAM you have, the settings for pagefile.sys, etc. What surely remains "here and there" are traces that you connected a given USB Mass Storage device and listened to that file. As an example, if the file is named <img src="images/smiles/icon_eek.gif" alt="Shocked" title="Shocked" /> :"the_recording_I_made_on August_19th_when_I_strangled_my_neighbour's_cat.wav" you might find yourself having a hard time explaining that. <img src="images/smiles/icon_wink.gif" alt="Wink" title="Wink" /> jaclaz

Viewing all articles
Browse latest Browse all 20107

Trending Articles