Undelete from MS-DOS/VFAT from Linux?

VirginSnow at vfemail.net VirginSnow at vfemail.net
Fri Jul 18 08:00:59 EDT 2008


> Date: Fri, 18 Jul 2008 01:55:56 -0400
> From: "Ben Scott" <dragonhawk at gmail.com>

>   I've got a FAT-formatted flash drive with a deleted file on it I'd
> like to get back.  I'm pretty sure the file is still there, just the
> directory entry for it is deleted. I'm wondering if anyone here has
> knowledge on this.

There was a nice presentation done at a couple of LUG meetings on
digital forensic file carving. Info online:

http://www.korelogic.com/Resources/Projects/dfrws_challenge_2006/


More information about the gnhlug-discuss mailing list