As a continuation of Richard Davis’ “Introduction to Windows Forensics” series, this video introduces Recycle Bin Forensics. From Windows 95 to Windows 10, the history of the Recycle Bin is covered. You’ll learn about the INFO2 metadata files found on older operating systems, as well as the $I and $R files found on modern operating systems. You’ll take a look at exactly what happens when a file is placed in the Recycle Bin, and also at a tool that will help us extract metadata from $I files.