Re: Undeleting (possible?)
En un mensaje anterior, Robert Watson escribió:[color=blue]
> free blocks, rather than all blocks, which while also non-perfect, will
> carefully exclude real data on the file system. I'm not sure if we have an
> easy way to select down to those blocks, unfortunately, but writing a tool
> to identify free blocks and dump them sequentially to a file probably isn't[/color]
Just for the archive, this part is more or less easy: there is a tool called
dls in the sleuthkit toolkit (in ports/sysutil).
[email]email@example.com[/email] mailing list
To unsubscribe, send any mail to "firstname.lastname@example.org"