[...] Reality, however, is somewhat different - deleting a file simply removes it’s marker from the ‘index’ of a hard drive - the actual file will remain on the computer, in whole or in part, until it has been completely overwritten by new data, as can been seen in this video of Encase. [...]

March 31st, 2008 at 7:22 am
Have you got any more information about encase?
March 31st, 2008 at 7:39 am
I’ll see what I can find for you Simon…
April 3rd, 2008 at 11:58 am
You might want to have a look at NUIX too.
Great forensic analysis software, slightly different to EnCase though. I have used it on several electronic discoveries and it saved us heaps of time and money - http://www.nuix.com
regards
TP
April 3rd, 2008 at 2:35 pm
That looks interesting Tony, I’ll take a closer look sometime.