Solution Guide

30 Triage
12
At the
Deleted File Filter
screen, determine whether or not you want to
include live and deleted files, only live files, or only deleted files in your
collection. If you do not select any of these options, you will collect no files.
Figure 2-15. Profile Configuration Step 6: Deleted File Filter
NOTE: Only deleted files that have not been overwritten already on the target
device are likely to be collected successfully; files that have been deleted and then
overwritten will either be corrupt or unretrievable.
13
Click the right arrow in the upper-right corner of the screen.