scrounge-ntfs
Data recovery program for NTFS filesystems
Site oficial:
http://thewalter.net/stef/software/scrounge/
Empacotamento:
https://salsa.debian.org/pkg-security-team/scrounge-ntfs
Versão no Kali: 0.9-11 · Arquiteturas: any · Comandos: 1
Metapacotes:
kali-linux-default
kali-linux-everything
kali-linux-headless
kali-linux-large
kali-tools-forensics
kali-tools-recover
kali-tools-respond
Documentação do Kali:
https://www.kali.org/tools/scrounge-ntfs/
Scrounge NTFS is a data recovery program for NTFS filesystems. It reads each block of the hard disk and try to rebuild the original filesystem tree into a directory. This package is useful in forensics investigations.
sudo apt install scrounge-ntfs (49 KB)
Dependências: libc6
Escolha um comando ao lado para ver a descrição e a ajuda completa.
scrounge-ntfs
Helps retrieve data from corrupted NTFS partitions
root@kali:~# scrounge-ntfs --help
scrounge-ntfs: invalid option -- '-'
usage: scrounge-ntfs -l disk
List all drive partition information.
usage: scrounge-ntfs -s disk
Search drive for NTFS partitions.
usage: scrounge-ntfs [-m mftoffset] [-c clustersize] [-o outdir] disk start end
Scrounge data from a partition
-m Offset to mft (in sectors)
-c Cluster size (in sectors, default of 8)
-o Directory to put scrounged files in
disk The raw disk partitios (ie: /dev/hda)
start First sector of partition
end Last sector of partition
