±Forensic Focus Partners
New Today: 4
New Yesterday: 4
±Follow Forensic Focus
· TSFIC 2015 – Myrtle Beach 31st May – 3rd June
· Forensics Europe Expo 2015 – Recap
· Capturing RAM Dumps and Imaging eMMC Storage on Windows Tablets
· TDFCon 2015 – Middlesbrough 15th May
· Electronic Voiceprints: The Crime Solving Power of Biometric Forensics
· DFRWS Europe 2015 Annual Conference – Recap
· DFRWS EU 2015 – Dublin 23rd – 26th March
· SQLite Database Forensics – ‘Sleep Cycle’ Case Study
· Data Recovery As A Medium For Email Forensics
I have this problem: a SANDISK MICRSD 2GB, after some operations that I don't know, when I try to mount on my linux devces I don't see 2GB but 32MB.
I have to recover some files inside this microsd and I don't understand how can I do.
Some people know something?
Do You know some software to read low level this microSD?
Could simply be a 2GB disk with a 32 MB partition.
(you could accomplish this in Linux but I don't know how to drive Linux so good)
That part aside it doesn't really matter what the partition size is you need a data recovery tool, is this part of a course you are doing or for personal interest?
- Senior Member
when I try to mount on my linux devces I don't see 2GB but 32MB.
HOW/WHERE EXACTLY you see "32 MB"?
In any case first thing you should do, before anything else, would be to image that device (and the size of the resultung image may be anther good indicator of what is happening).
Since you are on LInux use ddrescie or dd_rescue:
- In theory there is no difference between theory and practice, but in practice there is. -
- Senior Member