How Digital Forensics Accesses Data Which Has Apparently Been Deleted

One of the more recent developments in the world of forensic science is that of digital forensics. This field demands the ability to examine evidence and draw conclusions and has re-defined the way the legal system operates in the Western world. Whenever forensics is mentioned, people think of the human body and all the evidence it may leave behind, usually in the form of fingerprints and other material from the body. More recently, people have started to think of the DNA testing which is still a bit controversial. There are however, many other forms of forensics.

The ability to analyze a computer system and search for data is also a form of forensics, even though it may not initially seem to be a related discipline. This branch of the science is based upon the fact that data which appears to have been deleted from a system may not actually have been erased for good. Most digital systems only erase data finally when it is overwritten by new data which needs the memory room that the old data was using up. This means it can be accessed by those who know how to reach it.

The key to discovering lost data is to understand how files are deleted from a computer system. When you delete a file on a Windows computer, it goes to the Recycle Bin. From there, you can either empty the Bin, or use software which does this as part of a clean up of unwanted files. It will appear as though the file is lost and gone forever. This is simply an illusion, as the actual data will still be in exactly the same place. All that will have happened is that the indicators in the operating system which point to the file will have been changed and then deleted.

The bytes of data which were apparently deleted remain in memory until they are overwritten by new data. This could happen within minutes, as the user creates new files which need the space, or it could never happen. The data which is believed to be deleted could survive for years unknown to the user if no other data overwrites it. A digital forensics expert can quickly access all areas of memory to see if there is anything of significance still left on the hard drive.

This technique for finding deleted data is obviously hit and miss, as there is obviously no control over what is left and what is not. It can, however, turn up some extremely useful evidence. The same system can also be applied to other electronic devices which store information, especially cell phones. When you think of the data which is stored in the typical cell phone, you can imagine how useful it would be to have access to one belonging to a criminal. Even being diligent enough to constantly erase data may not be enough to defeat digital forensics.






 

Jobs In Forensics News:

 

URI named center of academic excellence in cybersecurity
URI WAS named a National Center of Academic Excellence in Information Assurance Education by The National Security Agency and the Department of Homeland Security...


Review: 'Digital Forensics for Legal Professionals' Is Essential Reading - Law.com

Review: 'Digital Forensics for Legal Professionals' Is Essential Reading
Law.com
By David J. KearneyContactAll Articles Authors Larry and Lars Daniel have assembled a nearly perfect book: Digital Forensics for Legal Professionals: Understanding Digital Evidence From the Warrant to the Courtroom is a reference manual, .

..


"Volatility On Demand": Catching A 54 Second Grand Rehearsal For A Market Crash In The Act
After uncovering all the dirty HFT-related details surrounding the SEC-complicit misdirection of the May 6, 2010 flash crash, which scapegoated a plain vanilla mutual fund with a report that has been now proven to be fatally flawed, and likely fabricated on purpose, the market forensics at Nanex have now uncovered something even more disturbing. As a reminder, some time ago, Nanex discovered ...


The biggest obstacle isaround community confidence in policing - Gulf Daily News

Gulf Daily News

The biggest obstacle isaround community confidence in policing
Gulf Daily News
New forensics techniques, a special crime academy and more bobbies on the beat are just some of the measures being proposed to overhaul Bahrain's police service. ROBERT SMITH reports. BAHRAIN'S police force is on the verge of major changes to prevent .

and more »
..


Take Our Daughters and Sons to Work Day at courthouse includes Dr. Seuss-themed mock trial
MOUNT HOLLY EUR” They could have just given a dry lecture about how the criminal justice system works, but that might not have entertained the more than 100 children who visited the Burlington County Cou..


Grayson College Hosts Law Enforcement Conference
DENISON,TX--Thursday, law enforcement brushed up on their skills in forensics and learned some new tricks to the trade. Grayson College held the 9th annual conference that lasted most of the day. It was..


NWC Forensics Team wins nationals - Billings Gazette

NWC Forensics Team wins nationals
Billings Gazette
The Northwest College Forensics Team brought home gold, silver and bronze from the Phi Rho Pi Nationals, wrapping up its 2011-12 year at the national tournament in Schaumberg, Ill. The NWC squad collected 10 individual awards on its way to silver in .

..


 

Advanced Search Tool:

 





It may not always be the case but you should assume the links on this website are affiliate links which means that we will be compensated if you choose to buy at some point in the near future. Please accept our thanks for your support.