This link has been bookmarked by 6 people . It was first bookmarked on 19 Jul 2007, by Mark Kealiher.
-
16 Jan 08
Marcello MorselloWHEN TO NOT USE MAGIC RESCUE Magic Rescue is not meant to be a universal application for file recovery. It will give good results when you are extracting known file types from an unusable file system, but for many other cases there are better tools availa
-
19 Jul 07
-
27 Nov 06
-
03 Nov 06
-
SEE ALSO Similar programs gpart(8) http://www.stud.uni-hannover.de/user/76201/gpart/. Tries to rebuild the partition table by scanning the disk for lost partitions. foremost(1) http://foremost.sourceforge.net. Does the same thing as magicrescue, except that its "recipes" are less complex. Finding the end of the file must happen by either matching an EOF string or just extracting a fixed number of bytes every time. It supports more file types than Magic Rescue, but extracted files usually have lots of trailing garbage, so removal of duplicates and sorting by size is not possible. The Sleuth Kit http://www.sleuthkit.org/sleuthkit/. This popular package of utilities is extremely useful for undeleting files from a FAT/NTFS/ext2/ext3/FFS file system that's not completely corrupted. Most of the utilities are not very useful if the file system has been corrupted or overwritten. It is based on The Coroner's Toolkit (http://www.porcupine.org/forensics/tct.html). JPEG recovery tools This seems to be the file type most people are trying to recover. Available utilities include http://www.cgsecurity.org/?photorec.html, http://codesink.org/recover.html, and http://www.vanheusden.com/findfile/. Getting disk images from failed disks dd(1), rescuept(1), http://www.garloff.de/kurt/linux/ddrescue/, http://www.kalysto.org/utilities/dd_rhelp/, http://vanheusden.com/recoverdm/, http://myrescue.sourceforge.net Processing magicrescue's output dupemap(1), file(1), magicsort(1), http://ccorr.sourceforge.net Authoring recipes magic(4), hexedit(1), http://wotsit.org Filesystem-specific undelete utilities There are too many to count them, especially for ext2 and FAT. Find them on Google and Freshmeat.
-
SEE ALSO Similar programs gpart(8) http://www.stud.uni-hannover.de/user/76201/gpart/. Tries to rebuild the partition table by scanning the disk for lost partitions. foremost(1) http://foremost.sourceforge.net. Does the same thing as magicrescue, except that its "recipes" are less complex. Finding the end of the file must happen by either matching an EOF string or just extracting a fixed number of bytes every time. It supports more file types than Magic Rescue, but extracted files usually have lots of trailing garbage, so removal of duplicates and sorting by size is not possible. The Sleuth Kit http://www.sleuthkit.org/sleuthkit/. This popular package of utilities is extremely useful for undeleting files from a FAT/NTFS/ext2/ext3/FFS file system that's not completely corrupted. Most of the utilities are not very useful if the file system has been corrupted or overwritten. It is based on The Coroner's Toolkit (http://www.porcupine.org/forensics/tct.html). JPEG recovery tools This seems to be the file type most people are trying to recover. Available utilities include http://www.cgsecurity.org/?photorec.html, http://codesink.org/recover.html, and http://www.vanheusden.com/findfile/. Getting disk images from failed disks dd(1), rescuept(1), http://www.garloff.de/kurt/linux/ddrescue/, http://www.kalysto.org/utilities/dd_rhelp/, http://vanheusden.com/recoverdm/, http://myrescue.sourceforge.net Processing magicrescue's output dupemap(1), file(1), magicsort(1), http://ccorr.sourceforge.net Authoring recipes magic(4), hexedit(1), http://wotsit.org Filesystem-specific undelete utilities There are too many to count them, especially for ext2 and FAT. Find them on Google and Freshmeat.
-
Would you like to comment?
Join Diigo for a free account, or sign in if you are already a member.