System restore forensics
Hie, can anyone kindly share the information regarding how to conduct forensics of a windows machine which restored the machine to latest restore point. Hurdles are….
1. No other previous resore point available in the system.
2. Volume shadow copies bring out no info
How to get the documents available on desktop before restore point.
Speedy answer is commendable.