no log as far as i know but i've used recuva when i deleted something on accident
Comment has been collapsed.
By default no, only if you manually enable file history.
Comment has been collapsed.
It's very easy to recover deleted files, if:
Next:
I recovered successfully files or even entire partitions (also from physically damaged disks - of course, not 100%).
Comment has been collapsed.
Are you interested only in seeing if something was deleted or actually recovering it? If it's the former, generally yes. There is something called the NTFS USN Journal that stores file operations that have taken place on an NTFS drive. It's reasonably difficult to tamper with which makes it a great resource for digital forensics.
If you were interested in only seeing what files were deleted and not recovering them, let me know. I'll see if I can't find a beginner-friendly tool for parsing the USN Journal (the tools are generally geared toward security analysts).
Comment has been collapsed.
46,835 Comments - Last post 11 minutes ago by JMM72
34 Comments - Last post 18 minutes ago by DarthSidious
26 Comments - Last post 1 hour ago by DeliberateTaco
8 Comments - Last post 1 hour ago by Chris76de
18 Comments - Last post 1 hour ago by Chris76de
7 Comments - Last post 2 hours ago by Seppel
369 Comments - Last post 2 hours ago by Atombomb2097
12 Comments - Last post 6 minutes ago by KoRayven
92 Comments - Last post 29 minutes ago by mateot93
15,170 Comments - Last post 38 minutes ago by Swordoffury
25 Comments - Last post 40 minutes ago by Marok13
725 Comments - Last post 41 minutes ago by Ghoztx9
112 Comments - Last post 46 minutes ago by Carenard
2,728 Comments - Last post 49 minutes ago by pizurk
Comment has been collapsed.