Ben,
You should look into the sleuthkit which has a bunch of tools that can
help you examine a disk image or file system.
http://www.sleuthkit.org/sleuthkit/
Also, there's an older article below which describes using fls and icat
to pull out deleted files.
Date: Fri, 18 Jul 2008 01:55:56 -0400
From: Ben Scott [EMAIL PROTECTED]
I've got a FAT-formatted flash drive with a deleted file on it I'd
like to get back. I'm pretty sure the file is still there, just the
directory entry for it is deleted. I'm wondering if anyone here has
knowledge on
If it were me I'd first dd the whole flash drive (assuming
it'd be practical, size-wise) into a file and operate on that
file via loopback rather than on the original, just in case...
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
Check out: Todays unshelved.
Permalink:
http://www.unshelved.com/archive.aspx?strip=20080718
Enjoy!
Dan
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/
Annual Summer BBQ XIV
When: Saturday, July 19, 2008 from 1:00 pm to 6:00 pm
Where: John and Shelley Chambers' home
33 Cedarwood Avenue, Waltham, MA.
Boston Linux Unix is holding its fouteenth annual summer BBQ on
Saturday, July 21st, beginning at 1:00 p.m. Everyone is welcome. Guests
are
