±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36783
New Yesterday: 0 Visitors: 134

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

file recovery with foremost

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page Previous  1, 2 
  

jaclaz
Senior Member
 

Re: file recovery with foremost

Post Posted: Sep 26, 19 10:38

- Ibernato

Yes, default image included in Windows 10 install.


Easiest - assuming that you won't need to boot the image again (let's start calling "image" the actual filesystem image - the .vmdk - and "pictures" the image files such as .jpg, etc.) would be to fill the picture files with 00's, they will still appear as files but they won't be carved by foremost anymore as pictures.

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 
 

Page 2 of 2
Page Previous  1, 2