Difference between pages "Identifying file systems" and "Data Recovery Stories"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
m
 
 
Line 1: Line 1:
There are many ways to identify a file system inside a partition.
+
Amazing stories of data recovery.
  
When an operating system attempts to mount a partition, it may use the ID from the partition table.
+
* [http://blocksandfiles.com/article/5056 May 6, 2008 - Kroll recovers over 90% of the data from a 400MB hard drive that was on Shuttle Columbia when it burned up on reentry into Earth's atmosphere.]
  
There are several tools that can identify the partition from the data it contains, including:
+
Daily updated real data recovery case studies, data recovery experiences and special data recovery tricks.
* [[blkid]]
+
* [[file]]
+
* [[parted]]
+
* [[testdisk]]
+
  
In general you should not rely on the partition record for determining the partition type.
+
[http://www.datarecoverystory.com/]
 
+
Some of the test images created for the [http://wiki.sleuthkit.org/index.php?title=Case_Studies Honeynet Challenges] have multiple file systems contained in a single partition.
+

Revision as of 04:20, 24 July 2009

Amazing stories of data recovery.

Daily updated real data recovery case studies, data recovery experiences and special data recovery tricks.

[1]