±Forensic Focus Partners
New Today: 6
New Yesterday: 17
· Can You Get That License Plate?
· How To Decrypt WeChat EnMicroMsg.db Database?
· A guide to RegRipper and the art of timeline building
· Recovering Evidence from SSD Drives in 2014: Understanding TRIM, Garbage Collection and Exclusions
· FT Cyber Security Summit 2014 – Recap
· Why Offender Profiling is Changing Thanks to Mobile Forensics and Increasingly ‘Social’ Criminal Activity
· Understanding Cyber Bullying – Notes for Digital Forensics Examiners
· Investigating the Dark Web – The Challenges of Online Anonymity for Digital Forensics Examiners
· The Complete Workflow of Forensic Image and Video Analysis
±Follow Forensic Focus
I have this problem: a SANDISK MICRSD 2GB, after some operations that I don't know, when I try to mount on my linux devces I don't see 2GB but 32MB.
I have to recover some files inside this microsd and I don't understand how can I do.
Some people know something?
Do You know some software to read low level this microSD?
Could simply be a 2GB disk with a 32 MB partition.
(you could accomplish this in Linux but I don't know how to drive Linux so good)
That part aside it doesn't really matter what the partition size is you need a data recovery tool, is this part of a course you are doing or for personal interest?
- Senior Member
when I try to mount on my linux devces I don't see 2GB but 32MB.
HOW/WHERE EXACTLY you see "32 MB"?
In any case first thing you should do, before anything else, would be to image that device (and the size of the resultung image may be anther good indicator of what is happening).
Since you are on LInux use ddrescie or dd_rescue:
- In theory there is no difference between theory and practice, but in practice there is. -
- Senior Member