Digital detectives digging through overflowing data

Anything that you work on over your computer will stay there as long as not directly deleted or removed although often times, data and files can still be recovered even when deleted or removed.

This was an easy thing to do for FBI anti-terrorism agencies as they proved to the world how nothing is impossible when they get their hands on the job. This was proven during an FBI case when a long deleted set of files was recovered from a computer used for terrorism.

The case was about Jamshid Muhtorov who was an Afghanistan refugee from Uzbekistan who was thought of being responsible for a number of assaults to coalition forces assigned in Afghanistan. He was found to have sworn allegiance to IJU and was found sending an email mentioning that Muhtorov was “ready for any task, even with the risk of dying.”

In the FBI’s research, they were able to obtain such files from long ago deleted files. Donald Hale – a special FBI agent said that “Even when files have been deleted, they can be recovered months or years later using forensic tools.” He also explained that remnants of any deleted data will remain in the computer until it is overwritten by another data.

The particular computer hard drive could also serve as a diary on who used it, how and when it was used. Having to gather such information from the convict’s computer easily led him to plead guilty of his crimes. However, this process did not happen quickly and required a “considerable time” as Hale mentioned in his interview.

This applies to all electronic devices which include mobile phones or cellphones. While the option ‘delete’ is available for users, it doesn’t necessarily mean that the files and data are removed from the phone. Bits and pieces of the file are still present in the device and digital detectives can easily trace these files. If you are working in a private environment and need the ability to handle these kinds of services you may be interested in forensic data recovery from Flashback Data.