Have any questions? Just call us at 1.866.900.4236

March 30, 2015

1 Comment

Digital Forensics: Recovering a Deleted Document

Hello Reader,

Our first blog post was inspired by a common question our clients pose to us, how do you recover a deleted document?

You have probably heard by now that a deleted file is not necessarily deleted. You’ve come to the right place and this is a question that we often help our clients answer. The objective of this blog post is to provide you an overview of how a digital forensic examiner recovers a deleted file from a thumb drive. In this blog post, we are going to cover the FAT file system, which a lot of small removable media devices, such as the 1GB thumb drive referenced in this blog post store data. Larger capacity removable media storage devices use other file systems, such as NTFS for storing data. Your Windows PC is using NTFS as its file system (unless there is a small chance you are using an antiquated PC running Windows XP or older operating system). FAT and NTFS file systems are beyond the scope of this blog post, but something that forensic examiners are familiar with when it comes to performing forensic examinations.

There are many methodologies and tools that a forensic examiner may utilize when recovering a delete file. This blog post is going to focus on recovering a deleted Microsoft Word document from a thumb drive. There are many forensic artifacts associated with this exercise, but we are just focusing on viewing a deleted file from a thumb drive. The file that we are going to recover is called “secret.docx” and it was deleted from a FAT formatted 1GB Kemper Technology USB Thumb Drive as pictured below (Figure 1).

Figure 1

Figure 1


Read more

March 11, 2015

No Comments

Welcome: Our Digital Forensic Services

As technology has changed through the years, so has the manner in which people communicate and share information.  If you want to learn how to do something, where to vacation, or just stay in tune with what is going on in the world, a Smartphone, tablet, or computer are all within reach to help you find that information.  Slow, dial-up Internet connectivity is a thing of the past and fast, high-speed Internet connectivity is now!

With the popularity of social media, e-mail, digital photography, document sharing, and other forms of electronic communication, people leave a trail of digital footprints every day.  These digital artifacts provide clues about an individual’s identity and activities and can prove to be critical during a number of situations businesses – and individuals – often face.  Digital forensics, e-discovery, and data recovery services can be utilized in civil litigation, divorce, business law, intellectual property theft, employee misuse, or business operational matters.

Read more