There are many ways in which data may become hidden from the average computer user including deletion of files by the user and automatic deletion of data by the operating system and software. Although the user may think that this information has been ‘deleted’, often it has not, and it actually remains on the hard drive until overwritten. Our examiners, using state of the art forensic methodologies, can recover this ‘lost’ data and reproduce it for use in an internal investigation or in court.