Notifications
Clear all
Topic starter
31/07/2009 9:58 pm
I have a folder that's been deleted. ProDiscover sees it, but it has weird ascii characters (boxes, dots, etc.) I'm assuming that this cluster has been overwritten? I've tried to extract the data using fls, but it just shows me the top level folder and nothing below it.
How would I know if something is overwritten or encrypted?
John