Hi,
I’m currently using Autopsy with my University module I have an image to analyse and it has un-allocated space. I extracted this to a file and carved it and got the result “$CarvedFiles” is this everything that was in this un-allocated space?
Also, is there a way for Autopsy to find hidden files such as files hidden in slack space or in bad cluster?
Thanks!
Dave