Re: [sleuthkit-users] TSK_Recover questions
Brought to you by:
carrier
From: Stefan K. <sk...@bf...> - 2013-01-25 15:55:35
|
Brian, > A late response, but I noticed that you never got one. Sorry about that. It works on all of the file systems that TSK works on (FAT, NTFS, etc.). If the disk has multiple partitions, then it makes a sub-directory for each and recovers files into the respective directory. would it be possible to make tsk_recover extract Alternate Data Streams (ADS) as well? Do others think this would be a useful feature at all? Cheers, Stefan. -- Stefan Kelm <sk...@bf...> BFK edv-consulting GmbH http://www.bfk.de/ Kriegsstrasse 100 Tel: +49-721-96201-1 D-76133 Karlsruhe Fax: +49-721-96201-99 |