Microsoft Vista makes unearthing deleted files easy
Published on Fri, Jul 20, 2007 at 20:00 | Source : Moneycontrol.com
Updated at Mon, Jul 23, 2007 at 10:54
Like this story, share it with millions of investors on M3
0
Like this story, share it with millions of investors on M3
Microsoft Vista makes unearthing deleted files easy
If you think the document you deleted six months ago is gone for good, think again. Forensic experts now unearth copies of deleted files with more detail and ease.
If you think the document you deleted six months ago is gone for good, think again. Forensic experts now nearth copies of deleted files with more detail and ease.
This man's not just fixing a computer. He's attempting to fix a criminal. He's checking out files that were deleted months ago on this computer to figure out who wrote what and when. And now his task is easier because the person he's investigating used Microsoft Vista.
Cyber-forensic expert Chirag Unadkat said, "It is now possible to know when the file was created, edited and deleted. Thus now the meta data is also accessible for an investigator. This has made it possible to construct forensic evidence."
The version stores a shadow copy of files in an unused part of the hard drive. Although the company had designed the system to prevent loss of data, it's now become invaluable to investigators. That's because this software does not forget for years.
Since Microsoft controls most of the market, users will have to go with Vista and all its back-up features. But from a forensic perspective, it means far more detailed information about what a person does with a PC.