Have a look at the SleuthKit and Autopsy as well …
😉
I've heard of but never played with those.
And take a look at the TestDisk - PhotoRec combo of apps.
Sounds like some fun as well! Thanks guys!!!! =) If only every board was this helpful the world would sure be a better place.
Any books to recommend? =p
As far as data recovery on damaged disks is concerned, have a look at Scott Moulton's presentation. It's available on his site
Any books to recommend? =p
Yep …
Look at
"File System Forensic Analysis" Brian Carrier
"Windows Forensic Analysis" Harlan Carvey
"Forensic Computing" Tony Sammes and Brian Jenkinson
"Forensic Discovery" Dan Farmer and Wietse Venema
Those should keep you going for a bit 😉
Now i know im new. However this thread has turned into a heap load of information for somebody starting out. Could this thread possibly stay as a sticky. Or incorporate a sticky thread with this information? So the next newbie that wants to start learning can get started with out having to ask redundant questions?
Just a thought