Skip to Main Content
Digital Archaeology: The Art and Science of Digital Forensics
book

Digital Archaeology: The Art and Science of Digital Forensics

by Michael W. Graves
August 2013
Intermediate to advanced content levelIntermediate to advanced
600 pages
16h 8m
English
Addison-Wesley Professional
Content preview from Digital Archaeology: The Art and Science of Digital Forensics

8. Finding Lost Files

Here is where the actual archaeology of the digital forensics expert comes into play. Digging out the “lost data” is one of the more challenging aspects of the trade. For anyone who has been on the technical side of computers for any length of time, it is old news that a deleted file hasn’t gone anywhere. Until overwritten, the data from that file stays where it’s at. Depending on the operating system in use, it can either be very easy to restore a file or very difficult.

From a forensics point of view, however, it isn’t just deleted files that are of concern. The investigator needs to be able to recognize the presence of hidden files, disguised files, and invisible files as well. Again, how easy that is to do depends entirely ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Start your free trial

You might also like

The Basics of Digital Forensics

The Basics of Digital Forensics

John Sammons
Digital Forensics

Digital Forensics

John Sammons

Publisher Resources

ISBN: 9780132853774Purchase book