September 3, 2018

March 26, 2018

September 14, 2017

September 7, 2017

Please reload

Recent Posts

Investigations into child pornography offenses often begin with the receipt of a CyberTipline Report from the National Center for Missing and Exploite...

Understanding NCMEC CyberTipline Reports

August 30, 2019

Please reload

Featured Posts

HG Experts Article: Deleted Files

September 6, 2017

I have a new article up on HG Experts:


Attorneys who need to read and understand reports by computer forensics professionals and/or who need to present recovered files as evidence should understand how files are stored on computers and mobile devices, what happens when they are deleted, how they can be recovered, and know the limits on file recovery.

Before diving into the details of deleted files and how they are recovered, we need to understand how files are stored. Every computer storage device--hard drive, thumb drive, SSD, CD-ROM--has a "filesystem" that dictates how files are arranged and stored on that device. Filesystems maintain metadata about each file they store including the name of the file, the user who created or owns 

the file, the time it was created or modified, and the addresses or locations where the file is actually stored. They also divide their storage space into allocation units or "blocks" to make it easier to manage. 


Read the rest here.

Share on Facebook
Share on Twitter
Please reload

Follow Us
Search By Tags
Please reload

  • Facebook Basic Square
  • Twitter Basic Square
  • Google+ Basic Square

Steven Alexander


Trace Digital Forensics, LLC


Bakersfield, CA





  • LinkedIn Social Icon
  • Facebook Social Icon

© 2019 Trace Digital Forensics, LLC.  Bakersfield, CA.