±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 32585
New Yesterday: 0 Visitors: 106

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

Using Foremost in Kali Linux to recover .MP4

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page 1, 2  Next 
  

Using Foremost in Kali Linux to recover .MP4

Post Posted: Wed Aug 09, 2017 5:38 am

Hello,

I am trying to recover some accidently deleted files off an SD card. They were on a gopro. The files I am looking for are .MP4 files.

What I have done so far is create an image of the SD card using dcfldd. When I scan the .dd file using foremost, I am coming up with JPGs that are not on the SD card that were there, and I do not see any MP4 files to include the ones that are still on the card.

The closest I have gotten is that I edited the foremost.conf file and removed the # for MPEG. I came up with thousand of MPG files, but I cannot view any of them. This is a time sensitive matter. Any good help with clear instruction is appreciated. Thank you in advance!!  

mfino
Newbie
 
 
  

Re: Using Foremost in Kali Linux to recover .MP4

Post Posted: Wed Aug 09, 2017 7:23 am

- mfino
This is a time sensitive matter. Any good help with clear instruction is appreciated. Thank you in advance!!

I am not sure if the question is:
How do I recover .MP4 files (from an image of a SD card I have made)?
or
How do I recover .MP4 files (from an image of a SD card I have made) exclusively by running Foremost and exclusively while running it on a Kali Linux?

I mean, you have the (hopefully) recovered volume/filesystem on a .dd image.

You should (could) throw at it each and every software available, not limit yourself to a specific tool.

Have you tried Photorec? (first tool I would personally try):
www.cgsecurity.org/wiki/PhotoRec

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 

jaclaz
Senior Member
 
 
  

Re: Using Foremost in Kali Linux to recover .MP4

Post Posted: Wed Aug 09, 2017 8:10 am

I have an SD card from a gopro.

I have made a .dd image of it using dcfldd (a program in kali)

I am open to use any software that is free, preferably on kali.

I need to recover .mp4 files that have been accidently deleted.

Do I need to edit for any special configurations for Photorec?

Thank you for your fast response and advice Smile  

mfino
Newbie
 
 
  

Re: Using Foremost in Kali Linux to recover .MP4

Post Posted: Wed Aug 09, 2017 9:04 am

- mfino

Do I need to edit for any special configurations for Photorec?

Thank you for your fast response and advice Smile

No, if it works it should be fully automated/automatic, it is normally (unless you script it) interactive, you have to make a few choices when the program is run.
See this step by step:
www.cgsecurity.org/wik...ep_By_Step

What I recommend when using this kind of tools is to use the log option:
www.cgsecurity.org/wik...n#PhotoRec

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 

jaclaz
Senior Member
 
 
  

Re: Using Foremost in Kali Linux to recover .MP4

Post Posted: Wed Aug 09, 2017 9:11 am

Thank you I will give it a go. I will let you know if i am successful or not.  

mfino
Newbie
 
 
  

Re: Using Foremost in Kali Linux to recover .MP4

Post Posted: Wed Aug 09, 2017 10:34 am

+1 for photorec. You can specify which file types you want to carve.
MP4 files may have mJpeg encoding, so if you are carving many jpeg files they may be video frames.

If the files were recently deleted, you can use file/folder recovery software. Testdisk is an example. www.cgsecurity.org/wiki/TestDisk

Good luck.
_________________
"Simplicity is the ultimate sophistication." 

calimelo
Senior Member
 
 
  

Re: Using Foremost in Kali Linux to recover .MP4

Post Posted: Wed Aug 09, 2017 4:17 pm

a little more luck with photo rec, but not enough luck... any other suggestions?  

mfino
Newbie
 
 

Reply to topicReply to topic

Share and Like this forum topic to get more replies




Page 1 of 2
Go to page 1, 2  Next