| <<< file recovery | Index | >>> |
How would you determine how many clusters a deleted file occupied?
If it has not been overwritten, the directory entry for the deleted file will contain the file size.
Dividing the file size by the cluster size (and rounding up!) will yield the numbers of clusters that the file occupies.
| <<< file recovery | Index | >>> |