-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Stuart Bird wrote: > Slightly more refined are sleuthkit (a set of commandline tools) and > autopsy ( a browser based gui for sleuthkit). These can be a bit tricky to > operate but there are plenty of docs on the web site. Ther is also a > commercial program called SMART which is very good at data extraction. It > costs, hoever a free version is available in the form of a bootable CD. > SMART can also do the imaging for you as well if you do fancy using dd. I > think there may be a file limit on the free version though, not too sure > now.
Hi Stu, I ran sleuthkit directly on the hard drive (as there wasn't anywhere at all I could put a 100GB+ image, and the data wasn't critical). I was able to recover the few files I was particularly concerned about but, as there wasn't any convenient way of recovering everything there (as it all seemed to be intact), I left it there. I then returned to the directory a couple of hours later and discovered, to my complete and utter surprise, that /everything/ had reappeared on the drive, within the filesystem and fully accessible. I promptly moved the data (of which there was only 4.4GB) to somewhere safe and now have the full drive working. Thanks for the help, Dan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFExijLlFI7BNKVCIkRAms1AJ958L3/ZH/EDd4MkvnKuwEyTA6wSgCfT615 qMbQLes2bujguRyEM/7rlYI= =z4B2 -----END PGP SIGNATURE----- _______________________________________________ Peterboro mailing list [email protected] https://mailman.lug.org.uk/mailman/listinfo/peterboro
