they are interested in? I want to know what tools are used by police to look for incriminating data. The case involves the SINGLE INSTANCE of an email message sent by the suspect and alleged by victim to be sexual harassment. The police claim to have found the message (they have not yet revealed their evidence or methods...they just made a statement of claim) in the free space/deleted region of an NTFS file system, and I want to do the absolute disk head-sector search myself.