Hi all,

I've been asked to search a computer for files that have been deleted recently.

As far as I am aware the disks have not been wiped (the directory
structure appears to be intact) and there is no need for this to pbe
presented in a court of law.

I've looked at foremost and it appears to only apply to a given partition.

As I am only interested in a particular directory and the disk partion
that the directory resides on is an ext3 LVM volume, are there any
risks in using foremost to recover this data?

Kind regards,

MWD
_______________________________________________
Pauldotcom mailing list
[email protected]
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

Reply via email to