Penetration Testing mailing list archives
Re: Light forensics
From: Tom Ritter <tom () ritter vg>
Date: Thu, 7 Jan 2010 15:41:41 -0300
Any good free tool to undelete files?
To undelete files you want to do File Carving[1] - which reads the disk and looks for files, ignoring the filesystem. There are some free tools to do it, but none of them are especially user-friendly. Foremost and Scalpel are the most common open source ones I believe. -tom [1] http://www.forensicswiki.org/wiki/File_Carving http://www.forensicswiki.org/wiki/Tools:Data_Recovery#Carving ------------------------------------------------------------------------ This list is sponsored by: Information Assurance Certification Review Board Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified. http://www.iacertification.org ------------------------------------------------------------------------
Current thread:
- Light forensics Eduardo Sierra (Jan 06)
- Re: Light forensics Alonso Caballero Quezada / ReYDeS (Jan 11)
- Re: Light forensics Wim Remes (Jan 11)
- Re: Light forensics Tom Ritter (Jan 11)
- Re: Light forensics Adrian Puente Z. (Jan 11)
- Re: Light forensics H. Kurth Bemis (Jan 11)
- RE: Light forensics Levenglick, Jeff (Jan 11)
- RE: Light forensics Dave Kleiman (Jan 11)
- Re: Light forensics Felipe Martins (Jan 18)
- RE: Light forensics Boyd, Chad (Jan 18)
- Re: Light forensics Adel Abushaev (Jan 11)