Notifications
Clear all

Recycle Bin

2 Posts
2 Users
0 Reactions
461 Views
 SKII
(@skii)
Active Member
Joined: 19 years ago
Posts: 13
Topic starter  

Hi,

i have some questions regarding Recycle Bin.I am using Encase 6.19.7.

When I extract the INFO2 record from the Recycle Bin of the suspect, there is only the information of one file inside. However, I can still see there are a lot of other files inside the Recycle Bin, e.g DC1.doc, DC2.xls. (Encase shows these files as deleted)

1) Does this show that the someone has emptied the Recycle Bin?
2) The deleted files in the Recycle Bin - these files were inside the Recycle Bin before it is emptied?
3) Is there any way to retrieve the deleted files with their original filenames?

Thanks.

Regards


   
Quote
Adam10541
(@adam10541)
Honorable Member
Joined: 13 years ago
Posts: 550
 

What OS are you examining?


   
ReplyQuote
Share: