Disk Forensics

The process of acquiring, examining, and analyzing data from storage devices to recover evidence, including deleted files and file system artifacts.