What is the reason for this?

A forensics investigator is searching the hard drive of a computer for files that were recently moved to the
Recycle Bin. He searches for files in C:\\RECYCLED using a command line tool but does not find anything.
What is the reason for this?

A forensics investigator is searching the hard drive of a computer for files that were recently moved to the
Recycle Bin. He searches for files in C:\\RECYCLED using a command line tool but does not find anything.
What is the reason for this?

A.
He should search in C:\\Windows\\System32\\RECYCLED folder

B.
The Recycle Bin does not exist on the hard drive

C.
The files are hidden and he must use switch to view them

D.
Only FAT system contains RECYCLED folder and not NTFS



Leave a Reply 0

Your email address will not be published. Required fields are marked *