On 9/11/05 8:21 PM, "Paul Schmehl" <[EMAIL PROTECTED]> wrote:
> Download the knoppix std distro and burn it to a cd. Use dcfldd for drive > imaging and the forensics tools for recovery of erased files and the like. > Paul. Does dcfldd allow me to mirror the disk in such a manner as to include deleted files? I can not swap drives. I need to obtain an image with which I can "undelete" files that were conventionally erased. Will dcfldd provide such an image? Thanks! _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
