Computer Analysis – What Can Forensic Experts Find?
When using a computer many people think that the files they delete have disappeared indefinitely. However, when there is the need for files to be found, (say, as part of a criminal or disciplinary investigation) a computer forensic analyst knows just how to find them. The average user cannot see the potential evidence that is kept in computer files and therefore believe that by simply pressing ‘Delete’ the files are then erased. Providing these files have then not been overwritten by regular and sustained use of a computer, they can be relocated in the “non-live” areas on the hard disk. These are called unallocated clusters and can hold gigabytes of deleted data. Computer analysis should be carried out by highly skilled and qualified practitioners who understand the science behind recovering these potentially valuable files, which can be used as vital evidence within a court case. Forensic analysts use their expertise and specialist software to recover data that can hold a lot of infor
