OSForensics™ allows you to recover and search deleted files, even after they have been removed from the Recycle Bin. This allows you to review the files that the user may have attempted to destroy.
Each deleted file found is displayed with a corresponding Quality indicator between 0-100. A value towards 100 means that the deleted file is largely intact, with only a few missing clusters of data.
Deleted File Cluster View
OSForensics also provides a graphical view of the allocation of the deleted file clusters on the physical disk.
The table displays the fragmentation information of the deleted file. For smaller files, the deleted file may be resident in the MFT (NTFS only).
The map provides a graphical representation of the location of the fragments with respect to the physical disk it resides on.
