banner
Dave Horner's Website - Yet another perspective on things...
Home Tech Talk Random Tech Computer Forensics
If you appreciate the information found on this website, please drop me a line!

Who's Online

We have 19 guests online
Content View Hits : 1157117
moon and stars
How did you find my site?
 
How often do you answer random online questions?
 

Random Quote

"Software people tend to favor the joy of complexity,
yet we should strive for the joy of simplicity."

- Alan Kay

P1010028_001
DCP00354
P1010181
P1010200

Computer Forensics

Thursday, 31 May 2007 16:17
Unixreview - More Forensic Tools
The Sleuth Kit
Forensics
TestDisk - CGSecurity


Data Recovery

Recover Data and (deleted) Partition with Linux from Hard Drives, CD-ROMs or DVDs « sysblogd
Foremost - Foremost is a console program to recover files based on their headers, footers, and internal data structures. This process is commonly referred to as data carving. Foremost can work on image files, such as those generated by dd, Safeback, Encase, etc, or directly on a drive. The headers and footers can be specified by a configuration file or you can use command line switches to specify built-in file types. These built-in types look at the data structures of a given file format allowing for a more reliable and faster recovery.
Last Updated on Sunday, 04 July 2010 10:51