[prev in list] [next in list] [prev in thread] [next in thread] 

List:       forensics
Subject:    RE: Recovering file slack
From:       "OFD Land Schreiber, Dennis" <DSchreiber () ofdst ! thueringen ! de>
Date:       2005-03-02 5:46:13
Message-ID: C3C377BB78DAD5118BFB00E0180D5140012AF702 () mailofdst2 ! prog ! ofd
[Download RAW message or body]

>Sleuthkit (www.sleuthkit.org) has this capability, as well as 
>the ability to recover unallocated space. It's freeware.

Autopsy (www.sleuthkit.org/autopsy/index.php) is a GUI for the 
Sleuthkit and also Open Source.

Sleuthkit and Autopsy can used on Windows (with CygWin) and Linux.


D. Schreiber

-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

[prev in list] [next in list] [prev in thread] [next in thread]