This document provides steps to recover deleted files from a local drive, search for a file using its hash value, acquire an image of a device, and export a generated report to a destination. The steps include clicking new, selecting the local drive, choosing the deleted file, clicking search to get the hash report, acquiring the device image, filling out details, and exporting the final report.

1. Click on new, fill information

2. Click on local drive

3. Select the suspected drive

4. Show all files

5. Select the deleted file

6. Select the file,click on search

7. Give the hash report

8. Click on G device, acquire image

9. Compute and recompute hash value

10. Fill information details

11. Click on export file,select destination

12. Report generated