I believe so: photorec [/log] [/debug] [/d recup_dir] [device|image.dd|image.e01]
Andrew Errington wrote:
I wonder, would it be possible to 'dd' the contents of the filestore and run PhotoRec on the dd image? This would guard against possible further damage to the filestore, and also allow many different tools to be applied to the 'original' data.
======================================================================= This email, including any attachments, is only for the intended addressee. It is subject to copyright, is confidential and may be the subject of legal or other privilege, none of which is waived or lost by reason of this transmission. If the receiver is not the intended addressee, please accept our apologies, notify us by return, delete all copies and perform no other act on the email. Unfortunately, we cannot warrant that the email has not been altered or corrupted during transmission. =======================================================================