Notifications
Clear all

INFO2 records

3 Posts
3 Users
0 Reactions
341 Views
(@bluedragon)
Trusted Member
Joined: 18 years ago
Posts: 60
Topic starter  

How do I search for deleted INFO2 records in unallocated space?
Any search term to use or the starting of a header?

By the way, anyone know if we use disk cleanup to clear temp internet files, will it go to the recycler? Any site that you can recommend to prove or disprove that?

Thanks in advance.


   
Quote
 ddow
(@ddow)
Reputable Member
Joined: 21 years ago
Posts: 278
 

By the way, anyone know if we use disk cleanup to clear temp internet files, will it go to the recycler? Any site that you can recommend to prove or disprove that?

The best site is always 127.0.0.1 That's easy enough to try on your own system.


   
ReplyQuote
 kern
(@kern)
Trusted Member
Joined: 20 years ago
Posts: 67
 

Hi Bluedragon

For info2 try rifiuti
w w w . foundstone.com/us/resources/proddesc/rifiuti.htm

The recycle bin, by its very nature, retains data.

So if you use disk cleanup its unlikely to move cr&p to the recycle bin, as one option in the menu is to clear the recycle bin to free up space.

as Dennis mentioned, its not to hard to try this for yourself to be sure. (127.0.0.1)

For unallocated space you would possibly be better searching for the actual files themselves, datacarving using header info.

kern


   
ReplyQuote
Share: