Resurrecting the Dead: Recovering Wiped Files Using Windows Search

more+
less-

It’s an electronic discovery nightmare. After months of fighting to gain access to the other side’s ESI, you learn that the key evidence you’ve been hoping to find was deleted. Worse yet, the data was wiped—rendering it unrecoverable by normal forensic techniques. What can be done? If you’re lucky, a handy little Microsoft feature called Windows Search could save the day.

LOADING PDF: If there are any problems, click here to download the file.

Published In: Electronic Discovery Updates, Science, Computers & Technology Updates

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Elluma Discovery | Attorney Advertising

Don't miss a thing! Build a custom news brief:

Read fresh new writing on compliance, cybersecurity, Dodd-Frank, whistleblowers, social media, hiring & firing, patent reform, the NLRB, Obamacare, the SEC…

…or whatever matters the most to you. Follow authors, firms, and topics on JD Supra.

Create your news brief now - it's free and easy »

CONNECT

Elluma Discovery provides computer forensics, electronic discovery, forensic data recovery, forensic... View Profile »


Follow Elluma Discovery:

Reporters on Deadline