Recover deleted Windows volumes
I have been given an HDD image. I believe the image was taken with dd. I have ingested the file using Autopsy and can see there are 4 volumes, like so
Volume 1 – Unallocated. I believe NOT securely deleted
Volume 2 – NTFS / exFAT. Window… Continue reading Recover deleted Windows volumes