[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [SAGE] Recover deleted files from ext3 file system

To: "Mike Noble" <mgnoble@gmail.com>, "Sage Members" <sage-members@sage.org>
Subject: Re: [SAGE] Recover deleted files from ext3 file system
From: Brad Knowles <brad@shub-internet.org>
Date: Fri, 20 Apr 2007 13:19:17 -0500
In-Reply-To: <aa0154910704201003h2c29c4acufd5ff8d5a55e9051@mail.gmail.com>
References: <aa0154910704201003h2c29c4acufd5ff8d5a55e9051@mail.gmail.com>
Sender: owner-sage-members@usenix.org

At 10:03 AM -0700 4/20/07, Mike Noble wrote:

>  This there a way to recover deleted files (command line rm) on linux
>  ext3 file system?

IIRC, Wietse Venema & Dan Farmer have some filesystem forensic tools 
that go along with their book.  Start at 
<http://www.opensourceforensics.org/tools/unix.html> and see if you 
can find anything useful there.

-- 
Brad Knowles <brad@shub-internet.org>, Consultant & Author
LinkedIn Profile: <http://tinyurl.com/y8kpxu>
Slides from Invited Talks: <http://tinyurl.com/tj6q4>

References:
- [SAGE] Recover deleted files from ext3 file system
  - From: "Mike Noble" <mgnoble@gmail.com>

Prev by Date: Re: [SAGE] shipping rack servers
Next by Date: Re: [SAGE] shipping rack servers
Prev by thread: [SAGE] Recover deleted files from ext3 file system
Next by thread: Re: [SAGE] Recover deleted files from ext3 file system
Index(es):
- Date
- Thread