±Partners and Sponsors
New Today: 0
New Yesterday: 2
· Man In The Middle Attack: Forensics
· Extracting Evidence from Destroyed Skype Logs and Cleared SQLite Databases
· Windows 8 File History Analysis
· Understanding Rootkits: Using Memory Dump Analysis for Rootkit Detection
· Bitcoin Forensics Part II: The Secret Web Strikes Back
· OS X Mavericks Metadata
· Bitcoin Forensics – A Journey into the Dark Web
· Analysis Of iOS Notes App
· Forensic Software in Child Protection Cases
±Follow Forensic Focus
I have this problem: a SANDISK MICRSD 2GB, after some operations that I don't know, when I try to mount on my linux devces I don't see 2GB but 32MB.
I have to recover some files inside this microsd and I don't understand how can I do.
Some people know something?
Do You know some software to read low level this microSD?
Could simply be a 2GB disk with a 32 MB partition.
(you could accomplish this in Linux but I don't know how to drive Linux so good)
That part aside it doesn't really matter what the partition size is you need a data recovery tool, is this part of a course you are doing or for personal interest?
- Senior Member
when I try to mount on my linux devces I don't see 2GB but 32MB.
HOW/WHERE EXACTLY you see "32 MB"?
In any case first thing you should do, before anything else, would be to image that device (and the size of the resultung image may be anther good indicator of what is happening).
Since you are on LInux use ddrescie or dd_rescue:
- In theory there is no difference between theory and practice, but in practice there is. -
- Senior Member