[Gllug] Linux hard drive forensic tools

[gvim]

On 24/01/2012 08:51, Lucian wrote:
>
> Also check photorec (testdisk), worked for me.
> --
> Gllug mailing list  -  Gllug at gllug.org.uk
> http://lists.gllug.org.uk/mailman/listinfo/gllug

Thanks, Lucian. Photorec is pretty amazing. Just untarred to OS X, connected the NTFS drive via a firewire-connected caddy and it's pulling out hundreds of files. If Spotlight recognizes them it shouldn't take long to find the relevant ones.

Once again testimony to the power of FOSS.

gvim
--
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug