[sleuthkit-users] Doubt on file formats
Brought to you by:
carrier
From: Pradeep M <pra...@gm...> - 2005-04-07 12:29:57
|
I am new to Linux and I have been assigned a task of recovering data from a floppy. I am also new to Autopsy. Actually when I went through the Honeynet site I saw similar exercises. In one of the scans they had a challenge of recovering files from a floppy. They gave some image.zip (http://www.honeynet.org/scans/scan24/image.zip) which contains a image and we have to recover deleted files from it. What I did was I used the same image and recovered deleted files by using auotpsy. My problem is I dont understand the file format of the image. When I created files in a floppy and deleted it, I am not able to recover it using autopsy. Autopsy could not recognise the file format. Can anyone help to solve this problem? Pradeep |