Kalin KOZHUHAROV
Kalin KOZHUHAROV
For "dump all found attributes" - yup, CSV might work; also a binary (the MFT fragment itself). Some time ago I was toying with a self-made carver (in Perl) that...
I worked a bit more on debugging this and here is a script to test it: [test.sh](https://github.com/Lazza/RecuperaBit/files/6174502/test.sh.txt) Just including directly the test results / findings: - **Finding 1:** RecuperaBit outputs...
RecuperaBit outputs timestamps as float, but always ending with .0, e.g. 1617001874.622692040 will be 1617001874.0 which is wrong. It can be 1617001874.6 or 1617001874 (or even 1617001875).
The dirty hack for a progress bar is using `pv` to attach to the running process :-D Assuming 17201 is the PID (e.g. use `ps aux|fgrep main.py` to find it),...
Yes exactly! RecuperaBit does a great job to reconstruct files based on carved metadata, but when there is no metadata for big chunks of the disk, those can be further...
Yes, I see it "can" require lots of resources and time. But for comparison, I just recovered some 4TB data from 6TB partition in 54 partitions and it never needed...
Can you give an example?
I am still trying to figure out how using many filters work in combination (and poking the code). If I am right in my understanding a simple one-line change of...
Currently the website is accessible.