Recovering Data from Windows Systems by Using Linux

by Todd Ogasawara

In a recent blog item here titled Linux ext2 recovery, NTFS, and Ghost my Inside Port 25 blogging colleague Dustin Puryear mentioned Chris Traver's great technical analysis note...

Recovering Data from Windows Systems by Using Linux

I thought it might be useful to highlight just a few of the points Chris brings up in his paper...

- Using sfdisk instead of fdisk
- Using dd (this may seem trivial to old time *NIX users, but most Windows users have never heard of dd)
- Linux NTFS support and issues
- The Coroner's Toolkit (TCT)

Click on the note's title above. It will take you to Jamie Cannon's blog item announcing the paper and provides a link to download the PDF document file.