Re: [sleuthkit-users] How to simply undelete files ?

[<te...@me...>]

Hello,
I think my problem is that the files were deleted on an EXT3 filesystem, it's certainly why icat doesn't find anything.

farmer dude wrote:
> Hi,
> 
> Your success will depend largely on the file system
> type the deleted files reside on.  What type?
> 
> Using The Sleuth Kit you can use 'icat' to undelete
> deleted files.
> 
> Other utilities are available that can assist,
> depending upon the file system type.
> 
> regards,
> 
> farmerdude
> 
> THE FARMER'S BOOT CD