hi guys
Been in a discussion with a friend about the above.
If one worksheet within an excel workbook file has been deleted, that file resaved and any system restore points deleted and recycle bins cleaned with a 35 Gutmann pass overwrite in CCleaner, is there any way of seeing / recovering that worksheet with something such as encase or other forensic software.
I'd say no as the file has been resaved, and in theory the actual excel file has never been deleted so there shouldn't be deleted copies sitting in the empty disk space. Surely all that is happening is the file has been amended and if system restores are deleted then there are no back ups.
Any thoughts?
MML
Social Networking Bookmarks