scalpel/photorec/foremost are all free and included within many Linux distributions. Carving for office files produces many false positives though as they do not have a defined footer.
On Wed, Mar 16, 2011 at 10:19 AM, Juan Cortes <[email protected]> wrote: > Guys, > > is there a way to recover office files. I downloaded the diskinternals > office recovery tool but I am not about to pay 150 for it. Is there a way I > can do this with SANs' SIFT tool or a linux distro?? > > thanks much! > > > > _______________________________________________ > Pauldotcom mailing list > [email protected] > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom > Main Web Site: http://pauldotcom.com > -- Andrew Case Senior Security Analyst @ Digital Forensics Solutions http://www.digitalforensicssolutions.com _______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
