Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.
Deleted Data 29 CHAPTER INFORMATION IN THIS CHAPTER: l l l How data is stored on a hard drive Deleted file recovery Evidence of data destruction INTRODUCTION One of the foundations of digital forensics is data recovery. Truly deleting data from a computer hard drive so that nothing is recoverable is quite hard to do. This chapter explains the ins and outs of how a computer stores data and what it does when it deletes data.