From: | Siju George <sgeorge.ml@xxxxxxxxx> |
Date: | Mon, 10 Aug 2009 10:39:03 +0530 |
HI, Are there any current Forensic tools that will work with a hammerfs disk image amde by dd? I guess sleuthkit and autopsy wont work. And what is the best way to undelete a file from hammerfs for which no snapshots are configured? Thanks --Siju