In this chapter, we will cover the following recipes:
- NTFS analysis with The Sleuth Kit
- Undeleting files from NTFS with Autopsy
- Undeleting files from ReFS with ReclaiMe File Recovery
- File carving with PhotoRec
In this chapter, we will cover the following recipes: