Hi,
Please excuse my bad english.
My father accidentally deleted all the photos/videos he had stored on his computer for 30 years.
I figured it out after 14 days, I now a created a copy of the disk “mydata.dd”.
But if I’m not mistaken, I only find files that haven’t been overwritten yet.
Can I use Autopsy directly on the disk and find files that have been overwritten once?
thanks.