±Your Account
Membership:
New Today: 4
New Yesterday: 10
Overall: 24370
Visitors: 77
±Latest Articles
· Catching the ghost: how to discover ephemeral evidence with Live RAM analysis
· Geo-tagging & Photo Tracking On iOS
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
· Geo-tagging & Photo Tracking On iOS
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
±Follow Us
±Latest Jobs
Back to top
Skip to content
Skip to menu
Back to top
Back to main
Skip to menu
HOW/WHERE EXACTLY you see "32 MB"?
In any case first thing you should do, before anything else, would be to image that device (and the size of the resultung image may be anther good indicator of what is happening).
Since you are on LInux use ddrescie or dd_rescue:
www.forensicswiki.org/wiki/ddrescue
jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -
MICROSD
MICROSD
Posted: Thu Nov 22, 2012 12:56 am
Hi,
I have this problem: a SANDISK MICRSD 2GB, after some operations that I don't know, when I try to mount on my linux devces I don't see 2GB but 32MB.
I have to recover some files inside this microsd and I don't understand how can I do.
Some people know something?
Do You know some software to read low level this microSD?
Thanks
G.
I have this problem: a SANDISK MICRSD 2GB, after some operations that I don't know, when I try to mount on my linux devces I don't see 2GB but 32MB.
I have to recover some files inside this microsd and I don't understand how can I do.
Some people know something?
Do You know some software to read low level this microSD?
Thanks
G.
-
fergiu - Newbie
Re: MICROSD
Posted: Fri Nov 23, 2012 3:16 am
Have you tried connecting to a windows machine (write blocked) and confirm via Disk Manager what the partition size is?
Could simply be a 2GB disk with a 32 MB partition.
(you could accomplish this in Linux but I don't know how to drive Linux so good)
That part aside it doesn't really matter what the partition size is you need a data recovery tool, is this part of a course you are doing or for personal interest?
Could simply be a 2GB disk with a 32 MB partition.
(you could accomplish this in Linux but I don't know how to drive Linux so good)
That part aside it doesn't really matter what the partition size is you need a data recovery tool, is this part of a course you are doing or for personal interest?
-
Adam10541 - Senior Member
Re: MICROSD
Posted: Fri Nov 23, 2012 4:33 am
- fergiuHi,
when I try to mount on my linux devces I don't see 2GB but 32MB.
HOW/WHERE EXACTLY you see "32 MB"?
In any case first thing you should do, before anything else, would be to image that device (and the size of the resultung image may be anther good indicator of what is happening).
Since you are on LInux use ddrescie or dd_rescue:
www.forensicswiki.org/wiki/ddrescue
jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -
-
jaclaz - Senior Member