Autopsy detects files marked as deleted in the MFT and sorts them all out, so a digital forensic examiner can locate such files and recover them.