[sleuthkit-users] Overwritten parition and filesystem and some Autopsy trouble
Brought to you by:
carrier
From: <spa...@gi...> - 2004-07-06 23:05:31
|
Hello, I have a harddisk which has two partitions on it (one of type 0x41, one of type 0x83 which is Linux ext2). By accident I started a script which recreated the two partitions, recreated the two filesystems and recreated the directory structure the same way as it was before. So I can still mount the ext2 partition and have access to all my previous directories. But now they are empty :( I tried to search for the inodes of the missing files without success. How do I actually have to proceed? My second question concerns autopsy. I start autopsy with "./autopsy 9999 192.168.1.109" (192.168.1.109 is the IP address of another machine). I enter the long URL into a browser on the other machine but get HTTP 403 denied. Am I missing something? Ciao, Christof |