Undelete - vfat capable

Robin Laing Robin.Laing at drdc-rddc.gc.ca
Thu Jun 15 19:43:30 UTC 2006


Robin Laing wrote:
> David Fletcher wrote:



>>
>> On 3rd May, there was a thread called "Undelete Compat Flash" that 
>> mentioned various forensic file recovery applications.
>>
>> Dave F
>>
> Thanks for the pointer.
> 
> I will have to give the links a try.
> 
> I wish the archives had a decent way of searching.
> 

Well, after trying the different tools suggest by the above links, I 
went and downloaded "freeundelete" for Windows and it recovered all but 
three of the files off of the SD card.  This is pretty good out of 300 
plus images.

All of the techniques suggest in the links in the archive are forensic 
recovery tools of some sort.  In the right case, these are the tools 
that would do the best job.  But in my case, they didn't prove 
successful.  I wanted a tool like the old dos undelete that would read 
the FAT table and use the file pointer to the beginning of the image file.

-- 
Robin Laing




More information about the fedora-list mailing list