History of deleted files.

[godinman]

Hi All,

I've a slight work problem I'm looking for a solution to.

Basically a load of video files have been deleted on a windows XP pro machine, is there a history anywhere that will tell me when they've been deleted?

It would be awesome if there was a list hiding somewhere of all files that have been deleted, with date/time etc..

They're not in recycle bin.

Thanks for any help.

 

[George Hincapie]

The INFO2 file within the Recycle Bin will give you that information, as well as the ID of the user account that deleted it. You'll probably need a forensic application (Encase or FTK) to view it though.

 

[godinman]

The INFO2 file within the Recycle Bin will give you that information, as well as the ID of the user account that deleted it. You'll probably need a forensic application (Encase or FTK) to view it though.

Hey, thanks for that. I'll have a look at those two tools and see if I can find anything.

Cheers.