On Thu, Jun 13, 2013 at 10:53 PM, green <greenfreedo...@gmail.com> wrote:
> Bob Proulx wrote at 2013-06-13 11:45 -0500: > > Good to hear that it was not ext3! > > For ext3, there is the ext4magic tool. (I have not used it.) > Thank you guys for all your input. The mention of scalpel, scrounge-ntfs reminded me that I should do some "apt-cache search forensic", and I found several other packages: foremost, autopsy, safecopy, guymager, etc. Is there any preference on any of these tools or warning that you would like to share? At this point I have to wait about two weeks before I can afford getting a 2TB drive where I could dump the recovered parts and try to resuscitate it. Is there any site that would have information about forensics? The best way to prepare is by learning the fundamentals, since anyway I have two weeks of waiting time.
