Re: [sleuthkit-users] Has anybody tried sleuth to recover a NTFS partition a broken raid?

[Brian C. <ca...@sl...>]

On May 9, 2005, at 11:25 PM, Edmundo Carmona wrote:
>
> I think I'm doing the right thing.... but I can't do much if I can't
> study the resulting image in case the linux ntfs say it's wrong. I
> guess I could use sleuth to analyse the result. Maybe you know of
> other people who have tried.
>
If  you can get an image file of the full partition or disk and the 
file system is valid, then TSK can be used.  TSK will not fix broken 
file systems and it will not recreate the RAID for you.

brian