What is the forensic significance of a 'deleted' flag in a SQLite database found on a mobile device?
-
A
The record has been permanently and securely overwritten
-
B
The record is marked for deletion but the data may still be fully recoverable
-
C
The record has been encrypted by the operating system for security
-
D
The record has been moved to a separate backup table automatically