Re: [sleuthkit-users] Lost a folder on my hard drive somehow can I recover?

[Jeff L. <j...@jl...>]

I would also make sure that /etc/foremost.conf has the file header for
an .mkv file. You can find the header definition here:

http://www.garykessler.net/library/file_sigs.html

I don't know how the file is terminated, but you can always grab up
to, say 4GB and then edit if needed.

The basic use of dd is dd if=/full/path/of/input/file
of=/full/path/of/output/file




On Fri, May 7, 2010 at 1:46 PM, Kaya Saman <Sam...@ne...> wrote:
> Thanks for the reply Joseph! :-)
>
> It's much appreciated.....
>
> Just to quote:
>