How To: Restore deleted files with Encase from NTFS USB drive

Use Encase to open the drive after the document has been deleted. The deleted file will show up in the program and will have a red circle with a line through it showing that it was previously deleted. The window on the bottom of the screen will show the document context so you can verify that it is the correct one. Right click on the file and click 'copy/unerase' to restore the document. Down in the bottom right hand corner you will see the progression of the copying to the chosen file destination. Find the extracted file and open it. It has now been restored.