Tips & Tricks // Recovering and Analyzing Deleted Data in AXIOM
Every examiner wants to know about deleted data in their investigation, often it can be an important piece to your case. Unfortunately, deleted data isn’t always available and if it is available, it may have different meaning depending on many factors such as the type of device (computer, mobile, cloud), the type of data (files, database records, metadata), or even how the user deleted it (recycle bin, deletion, or even wiping). In this session, we’ll look at various types of deleted data and how it can be found and searched for within AXIOM.