Re: [sleuthkit-users] help needed by a verynewbie

[Brian C. <ca...@sl...>]

OpenBSD wipes the block pointers in the inode when it deletes a file, 
so there isn't much you can do for recovery. Your best bet is to do 
some keyword searching on the partition for words that you know are in 
the files.

brian


On Oct 22, 2004, at 6:57 AM, vattini giacomo wrote:

> I hope that someone could helpme.
> So this was the situation from my partition
> /franzi/franzi i deleted two files faq1.html faq2.html