Hello,
I've used Recuva a few times and love it, however the question has been brought to my attention: What types of deletions count as actual deletions?
If a system process removes a file, will Recuva be able to see that and mark it as restorable or not? In a nutshell, I'm trying to use Recuva to figure out if a user deleted a file, or if the deletion was system generated. Would Recuva see files deleted in both ways with the same result? Would there be any indication that a file was deleted by system rather than a user?
Thanks!