PDA

View Full Version : [ubuntu] Good forensic data recovery tool for civilian?



Rumpletumbler
August 22nd, 2010, 01:18 AM
I took an old drive to try and learn something of file recovery in Ubuntu and ran Darik's boot and nuke on the disk.

I've tried scalpel, testdisk and a couple of others and haven't been able to recover a single file.

Should these tools recover any data from the disk in this state?

Are the tools that recover in just about any state only for leo's?

earthpigg
August 22nd, 2010, 01:37 AM
once you've zeroed out the disk (i assume that's what the boot and nuke thing you used does - there are other ways, with built in unix/linux tools), nothing can get the data back. period.