View Full Version : undelete from knoppix?
does anyone know if its possible to undelete files deleted (accidentally or deliberately) in windows from a knoppix cd. if so how do you do it. its fairly easy from dos or a recovery console but writing to CD is not so easy, also from either of those there is a risk of writing to the drive that you're recovering data from. if it can be done from knoppix well that seems to be the best of all.
WSC-fsl
03-03-2004, 05:28 AM
Good question,
Try these:
http://www.linux-forensics.com/
http://fire.dmzs.com/
**NOTE** I am not recommending either of these. Personally I don't use either because I very rarely have to do data recovery on window$ machines. I have looked into FIRE a bit but it was a while ago.
Hope this helps,
fsl
thanks for the info, have now downloaded both fire and penguinsleuth, now need to learn what they can do. on first looks it seems penguinsleuth is based on knoppix , therefore more familiar and easier to use. neither seem to have undelete capability for fat32/ntfs partitions, although both have LDE (linux disk editor) which could do a diskeditor style file undelete. ie: all manually
Powered by vBulletin® Version 4.2.2 Copyright © 2024 vBulletin Solutions, Inc. All rights reserved.