no log as far as i know but i've used recuva when i deleted something on accident
Comment has been collapsed.
By default no, only if you manually enable file history.
Comment has been collapsed.
It's very easy to recover deleted files, if:
Next:
I recovered successfully files or even entire partitions (also from physically damaged disks - of course, not 100%).
Comment has been collapsed.
Are you interested only in seeing if something was deleted or actually recovering it? If it's the former, generally yes. There is something called the NTFS USN Journal that stores file operations that have taken place on an NTFS drive. It's reasonably difficult to tamper with which makes it a great resource for digital forensics.
If you were interested in only seeing what files were deleted and not recovering them, let me know. I'll see if I can't find a beginner-friendly tool for parsing the USN Journal (the tools are generally geared toward security analysts).
Comment has been collapsed.
77 Comments - Last post 4 minutes ago by Foxhack
32 Comments - Last post 21 minutes ago by Adamdoodles
52 Comments - Last post 2 hours ago by davidpfarrell
2,163 Comments - Last post 3 hours ago by PicoMan
30 Comments - Last post 5 hours ago by devotee
5 Comments - Last post 9 hours ago by adam1224
871 Comments - Last post 9 hours ago by sensualshakti
18 Comments - Last post 1 minute ago by LuckyStrike1305
136 Comments - Last post 38 minutes ago by Kappaking
112 Comments - Last post 56 minutes ago by duville
156 Comments - Last post 1 hour ago by Kappaking
206 Comments - Last post 1 hour ago by LordAndrew
164 Comments - Last post 3 hours ago by FranckCastle
502 Comments - Last post 3 hours ago by Fitz10024
Comment has been collapsed.