Our digital forensic investigation involves the recovery of material (data mining) found in digital devices such as computers. This usually stipulates the data depicting fraudulent activities that employees believe they deleted or removed from the digital device; however, unaware that same can be recovered (data evidence) by forensic imaging. We are able to recapture such data and provide a report of our findings.