undelete from knoppix?

[DAS]

does anyone know if its possible to undelete files deleted (accidentally or deliberately) in windows from a knoppix cd. if so how do you do it. its fairly easy from dos or a recovery console but writing to CD is not so easy, also from either of those there is a risk of writing to the drive that you're recovering data from. if it can be done from knoppix well that seems to be the best of all.

[WSC-fsl]

Good question,

Try these:

http://www.linux-forensics.com/
http://fire.dmzs.com/

**NOTE** I am not recommending either of these. Personally I don't use either because I very rarely have to do data recovery on window$ machines. I have looked into FIRE a bit but it was a while ago.

Hope this helps,

fsl

[DAS]

thanks for the info, have now downloaded both fire and penguinsleuth, now need to learn what they can do. on first looks it seems penguinsleuth is based on knoppix , therefore more familiar and easier to use. neither seem to have undelete capability for fat32/ntfs partitions, although both have LDE (linux disk editor) which could do a diskeditor style file undelete. ie: all manually