Re: [PLUG] Recovery 2.5GB of deleted files [RESOLVED]

Eugene Smiley on 2 Nov 2005 02:22:24 -0000


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Recovery 2.5GB of deleted files [RESOLVED]


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Christopher Shanahan wrote:
> foremost, foremost, foremost
> Don't reinvent the wheel.
>
>
> As for TCT, you'll want TSK (The Sleuthkit), together with the
> Autopsy Forensic Browser and foremost. Brian Carrier took TCT and
> continued to develop it. It is now TSK.
Well, after spending a week on this. I found I did something rather
silly. I was looking for a specific file (unrelated to the jpeg
"loss"). I was using FSView in Konqueror and I found the "deleted"
directory in another directory. I've been saved by a simple 'mv'!
There are several reasons for admiting this.
1) I thought I'd searched every directory before embarking on this
little recovery foray, but obviously my judgement was clouded and
didn't see it.
2) I wanted to report on the success or failure of the software
mentioned, but alas the solution came from a different direction.
For anyone searching the archives, I apologive, but hopefully the
solutions mentioned help you.
-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.3
iQA/AwUBQ2gidukD7QKn7f0vEQLnxgCgiVaHcQt/VAE+NVE9ovSSAmVXTmoAoNfb
lXcoQaDxROcWSvdfbv+ef2wu
=Zwls
-----END PGP SIGNATURE-----
___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug



AltStyle によって変換されたページ (->オリジナル) /