±Forensic Focus Partners
New Today: 0
New Yesterday: 3
±Follow Forensic Focus
· DFRWS Europe 2015 Annual Conference – Recap
· DFRWS EU 2015 – Dublin 23rd – 26th March
· SQLite Database Forensics – ‘Sleep Cycle’ Case Study
· Data Recovery As A Medium For Email Forensics
· Carving out the Difference between Computer Forensics and E-Discovery
· Forensic Analysis of SQLite Databases: Free Lists, Write Ahead Log, Unallocated Space and Carving
· How Secure Is Your Password? A Friendly Advice from a Company That Breaks Passwords
· Using SQL as a date/time conversion tool
· Forensics and Bitcoin
I have this problem: a SANDISK MICRSD 2GB, after some operations that I don't know, when I try to mount on my linux devces I don't see 2GB but 32MB.
I have to recover some files inside this microsd and I don't understand how can I do.
Some people know something?
Do You know some software to read low level this microSD?
Could simply be a 2GB disk with a 32 MB partition.
(you could accomplish this in Linux but I don't know how to drive Linux so good)
That part aside it doesn't really matter what the partition size is you need a data recovery tool, is this part of a course you are doing or for personal interest?
- Senior Member
when I try to mount on my linux devces I don't see 2GB but 32MB.
HOW/WHERE EXACTLY you see "32 MB"?
In any case first thing you should do, before anything else, would be to image that device (and the size of the resultung image may be anther good indicator of what is happening).
Since you are on LInux use ddrescie or dd_rescue:
- In theory there is no difference between theory and practice, but in practice there is. -
- Senior Member