RECOVERING DIGITAL EVIDENCE

Shinder discusses how to recover digital evidences with the use of software programs to recover files in unallocated space. Deleting a file does not remove the content of the file; it merely removes the pointer to that file from the file allocation table, master file table or other scheme that the o...

Full description

Saved in:
Bibliographic Details
Published in:Law and order 2003-11, Vol.51 (11), p.45
Main Author: Deborah Littlejohn Shinder
Format: Magazinearticle
Language:English
Subjects:
Evidence
Information retrieval
Software
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Shinder discusses how to recover digital evidences with the use of software programs to recover files in unallocated space. Deleting a file does not remove the content of the file; it merely removes the pointer to that file from the file allocation table, master file table or other scheme that the operating system uses to pinpoint the location of a particular file on the disk. Details on recovering deleted and erased data are presented.
ISSN:0023-9194