[Gllug] Linux hard drive forensic tools

[Christian Smith]

On Mon, Jan 23, 2012 at 03:22:14PM +0000, gvim wrote:
> I have reformatted HFS+ Journaled a drive from which I would
> now like to be able to recover some lost data. It was
> originally formatted NTFS. Any chance with Linux/FOSS
> forensic tools? If so, which are recommended for this
> particular task?


Not tried it in anger, only used it to check if anything was
loaded onto a "new" SDCard I got, but try:
http://foremost.sourceforge.net/

It is filesystem agnostic, searches using file headers, so will
have to assume your files to recover are contiguous.

Christian
--
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug