A forensics investigator is searching the hard drive of a computer for files that were recently moved to the Recycle Bin.
He searches for files in C:\RECYCLED using a command line tool but does not find anything.
What is the reason for this?
A.
He should search in C:\Windows\System32\RECYCLED folder
B.
The Recycle Bin does not exist on the hard drive
C.
The files are hidden and he must use switch to view them
D.
Only FAT system contains RECYCLED folder and not NTFS
C is correct as system does not mention the file system.
On FAT drives, the directory that stores files in the Recycle Bin is called C:\RECYCLED , but on NTFS drives, its name is C:\RECYCLER