Quantcast
Channel: Forensic Focus Forums - Recent Topics
Viewing all articles
Browse latest Browse all 20110

Forensic Software: File concatenation on recovery from unallocated space

$
0
0
SteD wrote: I then copied, deleted, copied, deleted, formatted, copied, deleted some, copied, overwrote, deleted, etc etc onto the USB stick, and then worked on it, and recovered some of the deleted files from it Ste I may be far off the point with the limited information about the tool & methodology used but surely if you carry out the above practice and then used some linear carving process you are likely to recover fragmented patterns of ASCII once the carved items are concatenated into a file? Are the 'patterns' in 512byte (or multiples of) sections? I think we need to know a little more about your methodology and tools. Rgds Shep

Viewing all articles
Browse latest Browse all 20110

Trending Articles