单选题Tim is a forensic analyst who is attempting to retrieve information from a hard drive.It appears that the user attempted to erase the data,and Tim is trying to reconstruct it.What type of forensic analysis is Tim performing?
选项：

A:Software analysis
B:Media analysis
C:Embedded device analysis
D:Network analysis