Using Foremost in K...
 
Notifications
Clear all

Using Foremost in Kali Linux to recover .MP4

19 Posts
5 Users
0 Likes
3,715 Views
(@mfino)
Posts: 14
Active Member
Topic starter
 

Hello,

I am trying to recover some accidently deleted files off an SD card. They were on a gopro. The files I am looking for are .MP4 files.

What I have done so far is create an image of the SD card using dcfldd. When I scan the .dd file using foremost, I am coming up with JPGs that are not on the SD card that were there, and I do not see any MP4 files to include the ones that are still on the card.

The closest I have gotten is that I edited the foremost.conf file and removed the # for MPEG. I came up with thousand of MPG files, but I cannot view any of them. This is a time sensitive matter. Any good help with clear instruction is appreciated. Thank you in advance!!

 
Posted : 09/08/2017 4:38 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

This is a time sensitive matter. Any good help with clear instruction is appreciated. Thank you in advance!!

I am not sure if the question is
How do I recover .MP4 files (from an image of a SD card I have made)?
or
How do I recover .MP4 files (from an image of a SD card I have made) exclusively by running Foremost and exclusively while running it on a Kali Linux?

I mean, you have the (hopefully) recovered volume/filesystem on a .dd image.

You should (could) throw at it each and every software available, not limit yourself to a specific tool.

Have you tried Photorec? (first tool I would personally try)
http//www.cgsecurity.org/wiki/PhotoRec

jaclaz

 
Posted : 09/08/2017 6:23 pm
(@mfino)
Posts: 14
Active Member
Topic starter
 

I have an SD card from a gopro.

I have made a .dd image of it using dcfldd (a program in kali)

I am open to use any software that is free, preferably on kali.

I need to recover .mp4 files that have been accidently deleted.

Do I need to edit for any special configurations for Photorec?

Thank you for your fast response and advice )

 
Posted : 09/08/2017 7:10 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

Do I need to edit for any special configurations for Photorec?

Thank you for your fast response and advice )

No, if it works it should be fully automated/automatic, it is normally (unless you script it) interactive, you have to make a few choices when the program is run.
See this step by step
http//www.cgsecurity.org/wiki/PhotoRec_Step_By_Step

What I recommend when using this kind of tools is to use the log option
http//www.cgsecurity.org/wiki/Scripted_run#PhotoRec

jaclaz

 
Posted : 09/08/2017 8:04 pm
(@mfino)
Posts: 14
Active Member
Topic starter
 

Thank you I will give it a go. I will let you know if i am successful or not.

 
Posted : 09/08/2017 8:11 pm
(@mfino)
Posts: 14
Active Member
Topic starter
 

a little more luck with photo rec, but not enough luck… any other suggestions?

 
Posted : 10/08/2017 3:17 am
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

a little more luck with photo rec, but not enough luck… any other suggestions?

Try DMDE, there is a Linux version and you can try as suggested the almost fully functional Free version to see if it can find something *more* than photorec
http//dmde.com/
http//dmde.com/buy.html
I am not at all familiar with the console Linux version, (and you will need some time to get the hang of it) the Windows GUI one is a good program, it may (or it may not) recover *something more* than photorec though usually if photorec cannot find what is needed it means that either it is not there or it is there in a form that needs manual recovery.

jaclaz

 
Posted : 10/08/2017 3:48 pm
(@webyu)
Posts: 2
New Member
 

a little more luck with photo rec, but not enough luck… any other suggestions?

when you deleted the MP4 Files From SD,Some MP4 Files may become to fragments data.

I Can recovery MP4 Video From GroPro,with my self-coded software,if you can send me the image file.Contact me if you need help.yguodong@gmail.com

 
Posted : 11/08/2017 11:04 am
(@mscotgrove)
Posts: 938
Prominent Member
 

GoPro files are fragmented. Standard recovery programs will not work with GoPro SD cards

Use www.recovergopro.com

It has been written to just read deleted, formatted GoPro SD memory cards

 
Posted : 13/08/2017 3:19 am
(@slippery)
Posts: 4
New Member
 

You can try scalpel, similar to Foremost. Available most distros.

 
Posted : 31/08/2017 3:40 pm
Page 1 / 2
Share: