Disgruntled employee deleted entire directory, email, and part of a database. The deletion was not discovered until 3 days later. SHD forensic team leader was able to recover 100% of the data from unallocated space even after simple undelete tools failed recovery. SHD also recovered deleted email going back 45 days to establish employee’s intent and other data transfer.