What happens when a file is deleted (on a Windows system)
The million dollar question of any interview for a DFIR role. What happens when a file is deleted, what changes occur and how one can still find evidence of the file’s existence after the file was deleted. I personally heard this question in interviews for all roles that required experience in digital forensics. Next (as …
What happens when a file is deleted (on a Windows system) Read More »