Task 9.6: Recovering Deleted Content from the File System
There may be several reasons why deleted content needs to be recovered. In some cases, users accidentally delete files and need assistance in their recovery efforts. In other cases, administrators or forensic investigators need to recover deleted content as part of an investigation of unacceptable use of a system, or perhaps even from criminal activity.
Scenario
You are a security professional for an organization. A computer system is delivered to you with a report of suspected unacceptable use of the company’s computer system. The report indicates that a preliminary scan of the system shows nothing but approved software and content, but management wants to be sure that the suspected unauthorized ...
Get Security Administrator Street Smarts: A Real World Guide to CompTIA Security+™ Skills, Third Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
