[prev in list] [next in list] [prev in thread] [next in thread]
List: sleuthkit-users
Subject: [sleuthkit-users] TSK_Recover questions
From: "Mack, Eric [USA]" <mack_eric () bah ! com>
Date: 2010-11-30 18:30:28
Message-ID: 3FF653C7BA69914EB1C776EB9C6F7950155756D08B () ASHBMBX01 ! resource ! ds ! bah ! com
[Download RAW message or body]
I am interested in using TSK_Recover from inside a Windows .NET C# applicat=
ion to recover deleted files from a drive. I am trying to find documentati=
on on TSK_Recover to determine what file types it will recover. So far I h=
ave only been able to find the Man page that tells how to use the tool. Do=
es anyone know what file types and file systems TSK_Recover will work on? =
If there are two partitions in a drive image, will TSK_Recover recover from=
both partitions?
Thank you for any information you can provide.
[Attachment #3 (text/html)]
<html xmlns:v="urn:schemas-microsoft-com:vml" \
xmlns:o="urn:schemas-microsoft-com:office:office" \
xmlns:w="urn:schemas-microsoft-com:office:word" \
xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" \
xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=WordSection1>
<p class=MsoNormal>I am interested in using TSK_Recover from inside a Windows
.NET C# application to recover deleted files from a drive. I am trying to
find documentation on TSK_Recover to determine what file types it will
recover. So far I have only been able to find the Man page that tells how
to use the tool. Does anyone know what file types and file systems
TSK_Recover will work on? If there are two partitions in a drive image,
will TSK_Recover recover from both partitions?<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Thank you for any information you can provide.<o:p></o:p></p>
</div>
</body>
</html>
[Attachment #4 (--===============7890926420755094993==)]
------------------------------------------------------------------------------
Increase Visibility of Your 3D Game App & Earn a Chance To Win $500!
Tap into the largest installed PC base & get more eyes on your game by
optimizing for Intel(R) Graphics Technology. Get started today with the
Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs.
http://p.sf.net/sfu/intelisp-dev2dev
_______________________________________________
sleuthkit-users mailing list
https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
http://www.sleuthkit.org
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic