Digital Forensics

People use computers all the time, and sometimes we want to identify a previous state of the computer (like a file being deleted). The process of recovering digital information is called digital forensics. It can range form understanding file formats and their recovery methods to recovering files deleted from a harddrive and understanding how files are handled on an OS level.