Some raw utility listings can be found here and here.īelow are some of the editor’s (that’s me) picks.
For a decent description of the technique, please read this PhotoRec challenge page. This method is widely used in forensic analysis, but is also perfectly suitable when the recovery of specific filetypes is required, for example after a filesystem corruption. The magic numbers or “ magic bytes” or any other distinctive information contained in the header, main body or footer of a file is used in order to determine its type and to recover it in its entirety, if possible. This is a method of retrieving pre-defined types of files, based on distinctive characteristics and internal content structures, regardless of the filesystem or the operating system that was used when the data was written. Most of these tools try to recover the lost data with a process called data carving. I didn’t have the time to try any of them, but here is some info and some useful links to get started with. Today I came across some others some lists of other tools actually. I have already mentioned two excellent open source data recovery utilities, TestDisk and PhotoRec, in an older post.
0 kommentar(er)
