FORLETTA: Digital Forensics: Finding Lost Files.
Many digital forensics investigations start with finding files that belong to the computer’s previous user. Allocated files refer to those that can be viewed through the file system and whose contents, under normal circumstances, are not inadvertently overwritten by the operating system. Many digital forensics tools allow investigators to see allocated files in a disk [...]