±Your Account
Membership:
New Today: 2
New Yesterday: 9
Overall: 24207
Visitors: 49±Latest Webinar
±Latest Articles
· Android Forensics
· Geo-tagging & Photo Tracking On iOS
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
· Geo-tagging & Photo Tracking On iOS
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
±Follow Us
±Latest Jobs
Back to top
Skip to content
Skip to menu
Back to top
Back to main
Skip to menu
Without knowing what other tool that is and what kind of restrictions and requirements it imposes on the listing you want, it's difficult to provide an answer. Additionally, file systems differ, and a tool that works on one file system will not work on another.
That said, have you looked at Sleuthkit?
Existing and Deletetd files info
Existing and Deletetd files info
Posted: Sat Apr 14, 2012 5:34 am
Dear All
I am looking for a tool that helps on listing list information (name, type, address, size, last modified, and so on) about the existing and deleted files and folders in such a way that the output information can be used using another tool
This information will help me on doing my research
TThanks in advance
I am looking for a tool that helps on listing list information (name, type, address, size, last modified, and so on) about the existing and deleted files and folders in such a way that the output information can be used using another tool
This information will help me on doing my research
TThanks in advance
-

waleed - Newbie
Re: Existing and Deletetd files info
Posted: Sat Apr 14, 2012 10:19 am
- waleedI am looking for a tool that helps on listing list information (name, type, address, size, last modified, and so on) about the existing and deleted files and folders in such a way that the output information can be used using another tool
Without knowing what other tool that is and what kind of restrictions and requirements it imposes on the listing you want, it's difficult to provide an answer. Additionally, file systems differ, and a tool that works on one file system will not work on another.
That said, have you looked at Sleuthkit?
-

athulin - Senior Member
Re: Existing and Deletetd files info
Posted: Sat Apr 14, 2012 11:10 am
Thanks dear for your reply
I will give more inofrmation
I am doing a reserach that collect a selected data(file and folders) while encrypting and I must not make a biy-by-bit image from the hard drive. So, what I need is a tool that:
First, run from other device, means autorun so we will not modify the investigated drive
Second, scan the drive and give me a list of existing and deleted files with thier metadata (name, type, extension, and so on)
Then, I will used this metadata to select and encrypt the selected data. The process is easy but I have to first find out the deleted data. this is about my tool or reserach
about file system it can be windows
Thanks dear again for your interaction
I will give more inofrmation
I am doing a reserach that collect a selected data(file and folders) while encrypting and I must not make a biy-by-bit image from the hard drive. So, what I need is a tool that:
First, run from other device, means autorun so we will not modify the investigated drive
Second, scan the drive and give me a list of existing and deleted files with thier metadata (name, type, extension, and so on)
Then, I will used this metadata to select and encrypt the selected data. The process is easy but I have to first find out the deleted data. this is about my tool or reserach
about file system it can be windows
Thanks dear again for your interaction
-

waleed - Newbie
Re: Existing and Deletetd files info
Posted: Sat Apr 14, 2012 11:42 am
CnW Recovery software will do this with the free demo. www.cnwrecovery.com
Run a 'dummy' recover and the log will be populated with details you require.
If also checks the signature for each file
The log can be exported as a .CSV file
_________________
Michael Cotgrove
www.cnwrecovery.com
cnwrecovery.blogspot.com/
Run a 'dummy' recover and the log will be populated with details you require.
If also checks the signature for each file
The log can be exported as a .CSV file
_________________
Michael Cotgrove
www.cnwrecovery.com
cnwrecovery.blogspot.com/
-

mscotgrove - Senior Member
Re: Existing and Deletetd files info
Posted: Mon Apr 16, 2012 6:44 am
Ok dear, I would like to thank all of you
I have downloaded and tried CnWRecovery, as mscotgrove suggested, and its working well
Thanks again
I have downloaded and tried CnWRecovery, as mscotgrove suggested, and its working well
Thanks again
-

waleed - Newbie
















