Microsoft Vista makes unearthing deleted files easy

RELATED NEWS Microsoft launches global Office Ready initiative in India Microsoft announces launch of Windows Mobile 6 in India Nifty BSE | NSE 10/02/12 Are Mutual Funds betting on Nifty?

If you think the document you deleted six months ago is gone for good, think again. Forensic experts now nearth copies of deleted files with more detail and ease.

 

This man's not just fixing a computer . He's attempting to fix a criminal. He's checking out files that were deleted months ago on this computer to figure out who wrote what and when. And now his task is easier because the person he's investigating used Microsoft Vista .

 

Cyber-forensic expert Chirag Unadkat said, "It is now possible to know when the file was created, edited and deleted. Thus now the meta data is also accessible for an investigator. This has made it possible to construct forensic evidence."

 

The version stores a shadow copy of files in an unused part of the hard drive. Although the company had designed the system to prevent loss of data, it's now become invaluable to investigators. That's because this software does not forget for years.

 

Since Microsoft controls most of the market, users will have to go with Vista and all its back-up features. But from a forensic perspective, it means far more detailed information about what a person does with a PC.