±Your Account


Nickname
Password


Forgotten password/username?


Membership:
New Today: 2
New Yesterday: 9
Overall: 24207
Visitors: 49

Existing and Deletetd files info

EnCase, FTK, X-Ways Forensics etc. and open source/freeware discussion. Strictly no advertising of commercial products, please.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

Existing and Deletetd files info

Post Posted: Sat Apr 14, 2012 5:34 am

Dear All

I am looking for a tool that helps on listing list information (name, type, address, size, last modified, and so on) about the existing and deleted files and folders in such a way that the output information can be used using another tool

This information will help me on doing my research

TThanks in advance  

waleed
Newbie
 
 
  

Re: Existing and Deletetd files info

Post Posted: Sat Apr 14, 2012 10:19 am

- waleed
I am looking for a tool that helps on listing list information (name, type, address, size, last modified, and so on) about the existing and deleted files and folders in such a way that the output information can be used using another tool


Without knowing what other tool that is and what kind of restrictions and requirements it imposes on the listing you want, it's difficult to provide an answer. Additionally, file systems differ, and a tool that works on one file system will not work on another.

That said, have you looked at Sleuthkit?  

athulin
Senior Member
 
 
  

Re: Existing and Deletetd files info

Post Posted: Sat Apr 14, 2012 11:10 am

Thanks dear for your reply
I will give more inofrmation
I am doing a reserach that collect a selected data(file and folders) while encrypting and I must not make a biy-by-bit image from the hard drive. So, what I need is a tool that:
First, run from other device, means autorun so we will not modify the investigated drive
Second, scan the drive and give me a list of existing and deleted files with thier metadata (name, type, extension, and so on)

Then, I will used this metadata to select and encrypt the selected data. The process is easy but I have to first find out the deleted data. this is about my tool or reserach

about file system it can be windows

Thanks dear again for your interaction  

waleed
Newbie
 
 
  

Re: Existing and Deletetd files info

Post Posted: Sat Apr 14, 2012 11:42 am

CnW Recovery software will do this with the free demo. www.cnwrecovery.com

Run a 'dummy' recover and the log will be populated with details you require.

If also checks the signature for each file

The log can be exported as a .CSV file
_________________
Michael Cotgrove
www.cnwrecovery.com
cnwrecovery.blogspot.com/ 

mscotgrove
Senior Member
 
 
  

Re: Existing and Deletetd files info

Post Posted: Mon Apr 16, 2012 6:44 am

Ok dear, I would like to thank all of you
I have downloaded and tried CnWRecovery, as mscotgrove suggested, and its working well
Thanks again  

waleed
Newbie
 
 
Reply to topicReply to topic

Share this forum topic to encourage more replies



Page 1 of 1