Carving data from 80GB HDD

A place to ask the community for help with using Autopsy.

Moderator: carrier

Carving data from 80GB HDD

Postby rohanmuley » Fri Oct 23, 2015 6:42 am

Hi Team,

I have a 80GB HDD and I was able to execute all the modules (Timline, Web artifacts etc.). However, I am willing to carve out the deleted data from the same and I was not able to find any option in the Autopsy.

Please guide me on how to carve out the deleted data from the HDD. I am okay with running either the Windows version or the Linux version.

Any leads on this will be appreciated. :)

Thanks & Regards,
Rohan.
rohanmuley
 
Posts: 1
Joined: Fri Oct 23, 2015 6:26 am

Re: Carving data from 80GB HDD

Postby Hoyt » Mon Oct 26, 2015 7:15 pm

Which version of Autopsy are you using? Are you using the PhotoRec module?
Hoyt Harness, CFCE
Hoyt
 
Posts: 74
Joined: Thu Dec 11, 2014 4:02 am
Location: Little Rock, AR


Return to Autopsy Troubleshooting

Who is online

Users browsing this forum: No registered users and 1 guest