i need help with this plez and plez show screen shot for every steps.

i was usuing sleuthkit autopsy tools but its not working for me. i am not getting it.

When you analyze digital evidence, your job is to recover the data. If users have deleted or

overwritten files on a disk, the disk contains deleted files and file fragments in addition to existing

files. Remember that as files are deleted, the space they occupied becomes free spacemeaning

it can be used for new files that are saved or files that expand as data is added to them. The files

that were deleted are still on the disk until a new file is saved to the same physical location,

overwriting the original file. In the meantime, those files can still be retrieved. Forensics tools such as Autopsy can retrieve deleted files for use as evidence.