[plug] USB flash data recovery

Andrew Furey andrew.furey at gmail.com
Fri Oct 6 11:32:33 WST 2006


On 10/6/06, Daniel Foote <freefoote at gmail.com> wrote:
> If the data is not actually scrambled on the disk (ie, the FAT is
> stuffed but the data is ok) you might be able to use something like
> Foremost (http://foremost.sourceforge.net/). Given an image of a disk,
> it will look for signatures of files inside that image (it supports
> quite a few formats) and then extracts them.
>
> I have not actually used it (solved the problem I had another way),
> but it is written by the US government for forensic recovery purposes.

Along the same lines, I've had good experiences with magicrescue
(http://jbj.rapanden.dk/magicrescue/) in the past, which seems to work
reliably for at least doc, xls, ppt, jpg, png, and zip. You can also
supposedly define your own "recipes" for other file formats, although
I've never tried it.

Andrew

-- 
Linux supports the notion of a command line or a shell for the same
reason that only children read books with only pictures in them.
Language, be it English or something else, is the only tool flexible
enough to accomplish a sufficiently broad range of tasks.
                          -- Bill Garrett



More information about the plug mailing list