If I move a file from a non-hidden encrypted drive to my main C drive, then move the original file to a hidden container on the encrypted drive, then wipe the original file with ccenhancer/secure erase, is that doing enough to ensure the original location isn't known? Or does Windows log moved files by default and someone could tell if the copied file came from the encrypted drive?

  • I can't tell you the specifics, but what I can tell you is that Windows essentially tracks and records everything you could possibly do to the nth degree, and stores this information in all sorts of artifacts.
    – john doe
    Aug 10 '20 at 14:32
  • Damn.. ok, thank you! Aug 10 '20 at 22:03
  • @johndoe [[Citation needed]]
    – vidarlo
    Aug 13 '20 at 18:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.