• fat
  • Site Admin
  • Offline

Topic: file recovery and foremost

most of the time i spend here is answering other peoples questions but as i have said in the past i am not a fornsics man wink

I had a hd neeeding some recovery. specifically its a fat32 win98 c: drive that ate it with a virus (a friends)

I am ok with all the windos tools but i want to do this with S-T-D. I have built a pc for the task with 2 drive caddies ... the primary for storage and the secondary slave for the fragged HD. Its a meaty box with 1.5Gb of mem

My question is what the best resouce to read to use foremost?

Also for the dd copy of 14Gb patition (10Gb) where should i head reading wise.

appreciated

Re: file recovery and foremost

Mark take a peek at Brian Carriers sleuth kit informers each one covers a different sleuth kit tool and give examples. Why are you worried about DD??? is the 14 gig drive's integ in question ????  Either way there are examples of dd use in the sleuth kit papers as well.

For all KNOPPIX questions check out these:
http://www.knoppix.net/docs/

Re: file recovery and foremost

I use MultiStage Recovery. Very convenient file recovery tool.