Date: Thu, 28 Feb 2013 10:34:19 +0200 From: Dimitar Vassilev <dimitar.vassilev@gmail.com> To: Ben Cottrell <tamino@wolfhut.org> Cc: "Questions @ FreeBSD" <questions@freebsd.org>, "Joseph A. Nagy, Jr" <jnagyjr1978@gmail.com> Subject: Re: Fat Fingered An 'rm -rf' of Important Files Message-ID: <CAF%2BAZZXuU8x=yHKdJOjszwHLbLhyTJ6oWh1kGfF29=Jp5_TMkw@mail.gmail.com> In-Reply-To: <F1C8680E-BD64-4CC8-BCC9-61DC141E6346@wolfhut.org> References: <512ECA4A.3030202@gmail.com> <F1C8680E-BD64-4CC8-BCC9-61DC141E6346@wolfhut.org>
next in thread | previous in thread | raw e-mail | index | archive | help
2013/2/28 Ben Cottrell <tamino@wolfhut.org> > On Feb 27, 2013, at 19:08, "Joseph A. Nagy, Jr" <jnagyjr1978@gmail.com> > wrote: > > If we can skip the finger wagging on that part I'd appreciate it. > > No finger-wagging from this quarter at least! > > Something I've sometimes done to retrieve text content is to run a > "strings" on the disk device (the thing in /dev). You obviously want > to redirect the "strings" output to someplace that's *not* on the same > filesystem, or it'll be overwriting what you're trying to recover! > > It's usually possible, through searching for key words and phrases, > to get back any text content that you know was there. > > Sorry! And... good luck!! > > ~Ben > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org" > http://forums.freebsd.org/showthread.php?t=940 www.daemonforums.org/showthread.php?t=1801 http://wiki.sleuthkit.org/index.php?title=FS_Analysis
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAF%2BAZZXuU8x=yHKdJOjszwHLbLhyTJ6oWh1kGfF29=Jp5_TMkw>