[Gllug] Linux hard drive forensic tools
gvimrc at gmail.com
Tue Jan 24 23:49:27 UTC 2012
On 24/01/2012 08:51, Lucian wrote:
> Also check photorec (testdisk), worked for me.
> Gllug mailing list - Gllug at gllug.org.uk
Thanks, Lucian. Photorec is pretty amazing. Just untarred to OS X, connected the NTFS drive via a firewire-connected caddy and it's pulling out hundreds of files. If Spotlight recognizes them it shouldn't take long to find the relevant ones.
Once again testimony to the power of FOSS.
Gllug mailing list - Gllug at gllug.org.uk
More information about the GLLUG