Re: [sleuthkit-users] How to simply undelete files ?
Brought to you by:
carrier
From: farmer d. <far...@ya...> - 2006-01-25 00:24:17
|
Hi, Your success will depend largely on the file system type the deleted files reside on. What type? Using The Sleuth Kit you can use 'icat' to undelete deleted files. Other utilities are available that can assist, depending upon the file system type. regards, farmerdude THE FARMER'S BOOT CD --- "te...@me..." <te...@me...> wrote: > Hello everybody, > I'm new to sleuthkit,and I've got a problem which > might seem very basic to most og you but I can't > resolve it : > I recently burned some files from my hard-disk to a > CD / RW, then I deleted these files from my > hard-disk. > When I tried to read the CD, there seems to be > nothing on it. > I wasn't able to dd an image of the cd, so I can't > recover my files this way. > Then I launched autopsy on my hard-disk. Using File > analysis, I can see all the deleted files, but now, > I don't know how > to recover them. I don't want to use the sorter tool > from autopsy because I don't have enough free space > to copy all the > recovered files, only enough for the 700Mb of my > deleted files. > I would like to know what is the simple procedure to > recover one by one a few files which seems I good > state to recover > (as the partition where I deleted files wasn't > mounted since the deletion). > > > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do > you grep through log files > for problems? Stop! Download the new AJAX search > engine that makes > searching your log files as easy as surfing the > web. DOWNLOAD SPLUNK! > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com |