Wednesday, October 17, 2007

File Recovery

I ended up using 2 file recovery tools, magicrescue and foremost. Basically they grep through the disk blocks looking for specific patterns. This creates a huge amount of data to look through, but it seems like I was lucky and most (if not all) of the data was recovered. I tried using the sleuthkit some, and it seemed neat, but I didn't see how to apply the information it provided.

No comments: