Thanks. So, am I right in assuming if the following scenario happens, some remnant data will be left in free space?:
1. File is written to the drive. 2. Defrag happens, moves parts of the file around. 3. File is wiped with all zeros. 4. A data carving tool can still get the data from where it was before the defrag. I'm also wondering, if I use a VM ran from an encrypted volume, how much stuff might show up in the page file/swap space. Thanks, Adrian
_______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
